diff options
| author | wxs <wxs@FreeBSD.org> | 2012-02-07 12:13:47 +0800 |
|---|---|---|
| committer | wxs <wxs@FreeBSD.org> | 2012-02-07 12:13:47 +0800 |
| commit | 8cab4ea50e9d3b3d740fc0e3d1d002bf93613ad2 (patch) | |
| tree | 21da8b8245ca050ef41f77b20cf13903e6e76a81 /security/vuxml | |
| parent | 7c0d7f8ee1512ea4771c7c05a8d64544dbd675dd (diff) | |
| download | freebsd-ports-gnome-8cab4ea50e9d3b3d740fc0e3d1d002bf93613ad2.tar.gz freebsd-ports-gnome-8cab4ea50e9d3b3d740fc0e3d1d002bf93613ad2.tar.zst freebsd-ports-gnome-8cab4ea50e9d3b3d740fc0e3d1d002bf93613ad2.zip | |
Fix up 3fd040be-4f0b-11e1-9e32-0025900931f by giving a better description.
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 15 |
1 files changed, 11 insertions, 4 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 87b758d8f037..d0b15cefe2b4 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -107,19 +107,26 @@ Note: Please add new entries to the beginning of this file. </affects> <description> <body xmlns="http://www.w3.org/1999/xhtml"> - <p>PHP development team reports:</p> - <blockquote cite="http://www.php.net/ChangeLog-5.php"> - <p>Fixed arbitrary remote code execution vulnerability reported - by Stefan Esser, CVE-2012-0830.</p> + <p>Secunia reports:</p> + <blockquote cite="http://secunia.com/advisories/47806/"> + <p>A vulnerability has been reported in PHP, which can be exploited + by malicious people to compromise a vulnerable system.</p> + <p>The vulnerability is caused due to a logic error within the + "php_register_variable_ex()" function (php_variables.c) when + hashing form posts and updating a hash table, which can be + exploited to execute arbitrary code.</p> </blockquote> </body> </description> <references> <cvename>CVE-2012-0830</cvename> + <url>http://www.php.net/archive/2012.php#id2012-02-02-1</url> + <url>http://secunia.com/advisories/47806/</url> </references> <dates> <discovery>2012-02-02</discovery> <entry>2012-02-04</entry> + <modified>2012-02-06</modified> </dates> </vuln> |