----------------------------------------------------------------------

Hardcore Disassembler / Reverse Engineer Wanted!

Want to work with IDA and BinDiff?
Want to write PoC's and Exploits?

Your nationality is not important.
We will get you a work permit, find an apartment, and offer a
relocation compensation package.

http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Zend Platform Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA21573

VERIFY ADVISORY:
http://secunia.com/advisories/21573/

CRITICAL:
Highly critical

IMPACT:
Security Bypass, Exposure of sensitive information, DoS, System
access

WHERE:
>From remote

SOFTWARE:
Zend Platform 2.x
http://secunia.com/product/11679/

DESCRIPTION:
Stefan Esser has reported some vulnerabilities in Zend Platform,
which can be exploited by malicious people to cause a DoS (Denial of
Service), disclose sensitive information, bypass certain security
restrictions, and potentially compromise a vulnerable system.

1) A boundary error exists in the ZendSession Manager Daemon when
handling sessions. This can be exploited to crash the daemon by
sending an overly long or a zero-length session identifier.

2) A boundary error exists in the mod_cluster module when handling
sessions. This can be exploited to crash the module by sending an
overly long or a zero-length session identifier.

Successful exploitation may lead to arbitrary code execution.

3) An error exists in the ZendSession Manager when handling session
files, which can be exploited to create or read arbitrary session
files on an affected system with privileges of the daemon.

This can potentially be exploited to execute arbitrary PHP code on
the server when running with PHP4 prior to 4.4.3 or PHP5 prior to
5.1.4.

The vulnerabilities have been reported in version 2.2.1. Other
versions may also be affected.

SOLUTION:
Update to version 2.2.1a.

PROVIDED AND/OR DISCOVERED BY:
Stefan Esser

ORIGINAL ADVISORY:
http://www.hardened-php.net/advisory_052006.128.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------