---------------------------------------------------------------------- Want a new job? http://secunia.com/secunia_security_specialist/ http://secunia.com/hardcore_disassembler_and_reverse_engineer/ International Partner Manager - Project Sales in the IT-Security Industry: http://corporate.secunia.com/about_secunia/64/ ---------------------------------------------------------------------- TITLE: HP-UX update for Apache and Tomcat with PHP SECUNIA ADVISORY ID: SA30616 VERIFY ADVISORY: http://secunia.com/advisories/30616/ CRITICAL: Moderately critical IMPACT: System access WHERE: >From remote OPERATING SYSTEM: HP-UX 11.x http://secunia.com/product/138/ DESCRIPTION: HP has issued an update for Apache and Tomcat with PHP. This fixes a vulnerability, which can potentially be exploited by malicious people to compromise a vulnerable system. For more information: SA30048 The vulnerability affects HP-UX B.11.11, B.11.23, and B.11.31 running Apache or Tomcat with PHP v5.2.5 or prior. SOLUTION: Apply updates. -- For Apache IPv4 and IPv6 -- HP-UX B.11.11: hpuxwsAPACHE.PHP hpuxwsAPACHE.PHP2 Install revision B.2.0.59.04.02 or subsequent and restart Apache. ftp://srt80063:srt80063@hprc.external.hp.com HP-UX B.11.23: hpuxwsAPCH32.PHP hpuxwsAPCH32.PHP2 hpuxwsAPACHE.PHP hpuxwsAPACHE.PHP2 Install revision B.2.0.59.04.02 or subsequent and restart Apache. ftp://srt80063:srt80063@hprc.external.hp.com HP-UX B.11.31: hpuxwsAPCH32.PHP hpuxwsAPCH32.PHP2 hpuxwsAPACHE.PHP hpuxwsAPACHE.PHP2 Install revision B.2.0.59.04.02 or subsequent and restart Apache. ftp://srt80063:srt80063@hprc.external.hp.com -- For Tomcat IPv4 and IPv6 -- HP-UX B.11.11: hpuxwsTOMCAT hpuxwsTOMCAT.TOMCAT Install revision A.5.5.23.01.1 or subsequent and restart Tomcat. ftp://srt80063:srt80063@hprc.external.hp.com HP-UX B.11.23: hpuxwsTOMCAT hpuxwsTOMCAT.TOMCAT Install revision B.5.5.23.01.1 or subsequent and restart Tomcat. ftp://srt80063:srt80063@hprc.external.hp.com HP-UX B.11.31: hpuxwsTOMCAT hpuxwsTOMCAT.TOMCAT Install revision B.5.5.23.01.1 or subsequent and restart Tomcat. ftp://srt80063:srt80063@hprc.external.hp.com ORIGINAL ADVISORY: HPSBUX02342 SSRT080063: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437 OTHER REFERENCES: SA30048: http://secunia.com/advisories/30048/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------