rPath Security Advisory: 2007-0176-1 Published: 2007-09-05 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: gd=/[EMAIL PROTECTED]:devel//1/2.0.33-4.5-1 php=/[EMAIL PROTECTED]:devel//1/4.3.11-15.13-1 php-mysql=/[EMAIL PROTECTED]:devel//1/4.3.11-15.13-1 php-pgsql=/[EMAIL PROTECTED]:devel//1/4.3.11-15.13-1 php5=/[EMAIL PROTECTED]:1/5.2.3-7-1 php5-cgi=/[EMAIL PROTECTED]:1/5.2.3-7-1 php5-mysql=/[EMAIL PROTECTED]:1/5.2.3-7-1 php5-pear=/[EMAIL PROTECTED]:1/5.2.3-7-1 php5-pgsql=/[EMAIL PROTECTED]:1/5.2.3-7-1 php5-soap=/[EMAIL PROTECTED]:1/5.2.3-7-1 php5-xsl=/[EMAIL PROTECTED]:1/5.2.3-7-1
References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3472 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3473 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3474 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3475 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3476 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3477 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3478 https://issues.rpath.com/browse/RPL-1643 Description: Previous versions of the gd, php, and php5 packages are vulnerable to multiple attacks in which an attacker may cause unbounded CPU consumption or application crashes (Denial of Service), possibly leading to the execution of malicious code (Unauthorized Access). These attacks are generally limited to uses of the gd library to load existing images rather than generate new images. Many applications that use gd (including all uses of gd within rPath Linux) us gd only for generating new images, not for loading existing images. While rPath Linux itself is not vulnerable to these attacks, some uses of gd, particularly when loading attacker-supplied images, will be vulnerable. Some applications which use gd to load images supplied by remote users are web applications written in PHP. Copyright 2007 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html