rPath Security Advisory: 2007-0176-1
Published: 2007-09-05
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
Indirect User Deterministic Unauthorized Access
Updated Versions:
gd=/conary.rpath.com@rpl:devel//1/2.0.33-4.5-1
php=/conary.rpath.com@rpl:devel//1/4.3.11-15.13-1
php-mysql=/conary.rpath.com@rpl:devel//1/4.3.11-15.13-1
php-pgsql=/conary.rpath.com@rpl:devel//1/4.3.11-15.13-1
php5=/conary.rpath.com@rpl:1/5.2.3-7-1
php5-cgi=/conary.rpath.com@rpl:1/5.2.3-7-1
php5-mysql=/conary.rpath.com@rpl:1/5.2.3-7-1
php5-pear=/conary.rpath.com@rpl:1/5.2.3-7-1
php5-pgsql=/conary.rpath.com@rpl:1/5.2.3-7-1
php5-soap=/conary.rpath.com@rpl:1/5.2.3-7-1
php5-xsl=/conary.rpath.com@rpl:1/5.2.3-7-1
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3472
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3473
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3474
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3475
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3476
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3477
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3478
https://issues.rpath.com/browse/RPL-1643
Description:
Previous versions of the gd, php, and php5 packages are vulnerable
to multiple attacks in which an attacker may cause unbounded CPU
consumption or application crashes (Denial of Service), possibly
leading to the execution of malicious code (Unauthorized Access).
These attacks are generally limited to uses of the gd library to load
existing images rather than generate new images. Many applications
that use gd (including all uses of gd within rPath Linux) us gd
only for generating new images, not for loading existing images.
While rPath Linux itself is not vulnerable to these attacks,
some uses of gd, particularly when loading attacker-supplied
images, will be vulnerable. Some applications which use gd
to load images supplied by remote users are web applications
written in PHP.
Copyright 2007 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html
