This signature fires upon detecting a php command injection attempt.``PHP versions 4.3.6 and earlier on Win32 platforms such as Windows 2000, Windows XP, and Windows 2003 Server, contain a flaw in two core functions. Because of improper sanitization of user-supplied inputs, the escapeshellarg() and escapeshellcmd() functions can allow crafted input to be passed along to other functions and executed, running with the privileges of the web service.``No exploit code is neccessary for this vulnerability, as any escaped commands are executed natively as shell code.``PHP has released an update in the form of PHP 4.3.7.

Niels Provos libevent application programming interface (API) contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted system. The vulnerability is due to an incorrect memory pointer reference while handling a DNS response. A label pointer in the response could reference its own address offset, which may lead to uncontrolled, repeated references to the pointer. These references may consume processor resources. An unauthenticated, remote attacker could exploit the vulnerability by transmitting crafted DNS response requests to the system. When processed, the response could cause the system to become unresponsive, causing a DoS condition. Administrators may consider using IP-based access control lists (ACLs) to allow only trusted systems to access the affected systems. The vendor has not confirmed the vulnerability and software updates are not available.