都帮忙看看 这个到底有没有危险 不是很清楚严重程度 O_o

ulovko

1. ko# portaudit -Fda
   
2. auditfile.tbz                                 100% of   78 kB   80 kBps
   
3. New database installed.
   
4. Database created: Thu Jul 26 18:10:06 CST 2012
   
5. Affected package: php5-5.4.4
   
6. Type of problem: php -- potential overflow in _php_stream_scandir.
   
7. Reference: http://portaudit.FreeBSD.org/bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89.html
   
8. 
   
9. Affected package: chromium-19.0.1084.56_1
   
10. Type of problem: chromium -- multiple vulnerabilities.
    
11. Reference: http://portaudit.FreeBSD.org/ff922811-c096-11e1-b0f4-00262d5ed8ee.html
    
12. 
    
13. 2 problem(s) in your installed packages found.
    
14. 
    
15. You are advised to update or deinstall the affected package(s) immediately.
    

复制代码

http://portaudit.FreeBSD.org/bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89.html
http://portaudit.FreeBSD.org/ff9 ... 4-00262d5ed8ee.html

什么都是青蛙

  升级下吧，应该是有危险性的。

什么都是青蛙

http://securitytracker.com/id/1027287   

A remote user may be able to to trigger an overflow in the _php_stream_scandir() function and potentially execute arbitrary code on the target system.

ulovko

回复 3# 什么都是青蛙


    chromium 不编译有没有危险的 这个很费事 ^_^