Debian: New php3 packages fix several vulnerabilities
Posted by Benjamin D. Thomas   
Debian Updated packages.
- --------------------------------------------------------------------------
Debian Security Advisory DSA 669-1                                        Martin Schulze
February 7th, 2005            
- --------------------------------------------------------------------------

Package        : php3
Vulnerability  : several
Problem-Type   : remote
Debian-specific: no
CVE IDs        : CAN-2004-0594 CAN-2004-0595

Two vulnerabilities have been discovered in php4 which also apply to
the version of php3 in the stable Debian distribution.  The Common
Vulnerabilities and Exposures project identifies the following


    The memory_limit functionality allows remote attackers to execute
    arbitrary code under certain circumstances.


    The strip_tags function does not filter null (