106 matches found
Fedora 14 : maniadrive-1.2-27.fc14 / php-5.3.6-1.fc14 / php-eaccelerator-0.9.6.1-6.fc14 (2011-3636)
Security Enhancements and Fixes in PHP 5.3.6 : - Fixed bug 54247 format-string vulnerability on Phar. CVE-2011-1153 - Fixed bug 54193 Integer overflow in shmopread. CVE-2011-1092 - Fixed bug 54055 buffer overrun with high values for precision ini setting. - Fixed bug 54002 crash on crafted tag in...
Fedora 13 : maniadrive-1.2-27.fc13 / php-5.3.6-1.fc13 / php-eaccelerator-0.9.6.1-6.fc13 (2011-3666)
Security Enhancements and Fixes in PHP 5.3.6 : - Fixed bug 54247 format-string vulnerability on Phar. CVE-2011-1153 - Fixed bug 54193 Integer overflow in shmopread. CVE-2011-1092 - Fixed bug 54055 buffer overrun with high values for precision ini setting. - Fixed bug 54002 crash on crafted tag in...
Mandriva Update for php MDVSA-2011:052 (php)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
PHP 5.3 < 5.3.6 String To Double Conversion DoS
Binary data 801082.prm...
PHP 5.3.6 closes five security holes !
The PHP developers have released PHP 5.3.6, a maintenance update to the PHP interpreter. Among over 60 bug fixes are a number of fixes for security related problems. A format string vulnerability in the phar extension of PHP 5.3.5, CVE-2011-1153, may allow attackers to view memory, cause a denial...
CVE-2011-1153
CVE-2011-1153 involves multiple format string vulnerabilities in the php phar extension, specifically phar_object.c, affecting PHP 5.3.5 and earlier. The issue allows context-dependent attackers to obtain sensitive data from process memory, cause memory corruption (DoS), or potentially execute ar...
CVE-2010-1153
PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable...
CVE-2010-1153
CVE-2010-1153 affects TYPO3 4.3.x prior to 4.3.3. The autoloader component is vulnerable to PHP remote file inclusion, allowing an attacker to execute arbitrary PHP code by supplying a URL in the className input field. This results in remote code execution with the attacker exploiting a network-b...
Fedora Update for bochs FEDORA-2007-1153
Check for the Version of bochs OpenVAS Vulnerability Test Fedora Update for bochs FEDORA-2007-1153 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Debian Security Advisory DSA 1153-1 (clamav)
The remote host is missing an update to clamav announced via advisory DSA 1153-1. Damian Put discovered a heap overflow vulneravility in the UPX unpacker of the ClamAV anti-virus toolkit which could allow remote attackers to execute arbitrary code or cause denial of service. OpenVAS Vulnerability...
CVE-2007-1153
CVE-2007-1153 concerns CuteNews 1.3.x (notably 1.3.6) with multiple PHP remote file inclusion vulnerabilities in CuteNews/CutePHP. The root cause is improper handling of user-controllable inputs, enabling remote attackers to cause arbitrary PHP code execution via unspecified vectors; related CVEs...
Debian DSA-1153-1 : clamav - buffer overflow
Damian Put discovered a heap overflow vulnerability in the UPX unpacker of the ClamAV anti-virus toolkit which could allow remote attackers to execute arbitrary code or cause denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
CentOS 4 : mozilla (CESA-2005:386)
Updated mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Vladimir V...
CentOS 4 : Firefox (CESA-2005:383)
Updated firefox packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Vladimir V. Perepelitsa discovered a bug in the way Firefox handles...
CVE-2006-1153
CVE-2006-1153 describes a SQL injection vulnerability in D2-Shoutbox 4.2 that allows remote attackers to execute arbitrary SQL commands via the load parameter when performing a Shoutbox action through Invision Power Board (IPB). The issue affects D2-Shoutbox 4.2 as documented in NVD/NVD-derived r...
CVE-2003-1153
The CVE-2003-1153 entry concerns byteHoard versions 0.7 and 0.71, where an attacker can remotely enumerate files and directories by issuing a direct request to files.inc.php. The underlying issue is a lack of access control for directory/file listing, resulting in information disclosure (partial ...
RHEL 4 : Mozilla (RHSA-2005:386)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:386 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Vladimir V. Perepelitsa...
mozilla security update
CentOS Errata and Security Advisory CESA-2005:386 Updated mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup...
CVE-2004-1153
Adobe Acrobat Reader (Windows/macOS/Linux) versions 6.0.0–6.0.2 are affected by a DoS/vulnerability in the ETD file parser caused by a format string flaw, which can crash the app and potentially enable code execution. The OpenVAS entries corroborate a DoS impact but do not provide a patch or miti...
