CVE-2008-1391: Undefined Security Weakness

Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to 1 the strfmon function in...

PHP integer overflow

Integer overflow in printf function...

php -- integer overflow vulnerability

CVE reports: Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the phpsprintfappendstring function in formattedprint.c and...

Debian Security Advisory DSA 055-1 (gftp)

The remote host is missing an update to gftp announced via advisory DSA 055-1. OpenVAS Vulnerability Test $Id: deb0551.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 055-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 061-1 (gnupg)

The remote host is missing an update to gnupg announced via advisory DSA 061-1. OpenVAS Vulnerability Test $Id: deb0611.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 061-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 107-1 (jgroff)

The remote host is missing an update to jgroff announced via advisory DSA 107-1. OpenVAS Vulnerability Test $Id: deb1071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 107-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 058-1 (exim)

The remote host is missing an update to exim announced via advisory DSA 058-1. OpenVAS Vulnerability Test $Id: deb0581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 058-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 066-1 (cfingerd)

The remote host is missing an update to cfingerd announced via advisory DSA 066-1. OpenVAS Vulnerability Test $Id: deb0661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 066-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 066-1 (cfingerd)

The remote host is missing an update to cfingerd announced via advisory DSA 066-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 058-1 (exim)

The remote host is missing an update to exim announced via advisory DSA 058-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 072-1 (groff)

The remote host is missing an update to groff announced via advisory DSA 072-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-3552: Undefined Security Weakness

Multiple unspecified vulnerabilities in bbs100 before 3.2 allow remote attackers to cause a denial of service crash via unspecified vectors, possibly involving certain vprintf and shiftStringIO functions. NOTE: some details were obtained from third party information...

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution / Fedora Core 6 exec-shield based Webdesproxy webdesproxy-0.0.1.tgz remote root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

Integer overflow

Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via 1 certain negative argument numbers that arise in the phpformattedprint function because of 64 to 32 bit...

CVE-2007-1884

Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via 1 certain negative argument numbers that arise in the phpformattedprint function because of 64 to 32 bit...

CVE-2007-1884

Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via 1 certain negative argument numbers that arise in the phpformattedprint function because of 64 to 32 bit...

CVE-2007-1884

Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via 1 certain negative argument numbers that arise in the phpformattedprint function because of 64 to 32 bit...

CVE-2007-1884

CVE-2007-1884 affects PHP 4.x before 4.4.5 and PHP 5.x before 5.2.1 on 64‑bit platforms. The vulnerability arises from integer signedness errors in the printf family, allowing context-dependent attackers to execute arbitrary code via (1) certain negative argument numbers from 64→32 bit truncation...

PHP printf() integer overflow

Integer overflow on 64-bit systems...

MOPB-38-2007:PHP printf() Family 64 Bit Casting Vulnerabilities

Summary A helper function used by the printf PHP function family returns a unsigned 63 bit long, but the result is internally stored in 32 bit ints. Because of the 32 bit truncation the resulting ints can be negative which is not catched by the calling code in differen code paths. This can result...