PHP 5 php_sprintf_appendstring()函数整数溢出漏洞

BUGTRAQ ID: 28392 CVECAN ID: CVE-2008-1384 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP formattedprint.c文件的printf函数存在整数溢出漏洞，能够执行PHP脚本的攻击者可能利用此漏洞提升权限。 在formattedprint.c文件的phpsprintfappendstring函数中： - ---formattedprint.c-start--- inline static void phpsprintfappendstringchar buffer, int pos, int siz...

{securityreason.com}PHP 5 *printf() - Integer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.2.5 and prior : printf functions Integer Overflow Author: Maksymilian Arciemowicz cXIb8O3 SecurityReason.com and SecurityReason.pl Date: - - Written: 01.03.2008 - - Public: 20.03.2008 SecurityReason Research SecurityAlert Id: 52 CVE-2008-1384...

Debian Security Advisory DSA 1384-1 (xen-utils)

The remote host is missing an update to xen-utils announced via advisory DSA 1384-1. OpenVAS Vulnerability Test $Id: deb13841.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1384-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 232-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory DSA 232-1. OpenVAS Vulnerability Test $Id: deb2321.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 232-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

SuSE 10 Security Update : ktorrent (ZYPP Patch Number 3049)

Ktorrent insufficiently validated the target file name. A malicious Server could therefore overwrite arbitary files of the user CVE-2007-1384 / CVE-2007-1799. Another bug could be exploited to crash Ktorrent. CVE-2007-1385 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

CVE-2003-1384

The CVE-2003-1384 entry describes a Cross-site scripting (XSS) vulnerability in PY-Livredor 1.0, specifically in index.php. The affected component is the web form fields (titre, Votre pseudo, Votre e-mail, Votre message). The underlying cause is improper handling of user-supplied input, enabling ...

openSUSE 10 Security Update : ktorrent (ktorrent-3057)

Ktorrent insufficiently validated the target file name. A malicious Server could therefore overwrite arbitary files of the user CVE-2007-1384,CVE-2007-1799. Another bug could be exploited to crash Ktorrent CVE-2007-1385. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

Directory traversal

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...

CVE-2007-1384

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a torrent filename...

CVE-2007-1384

CVE-2007-1384 affects KTorrent prior to 2.1.2, via a directory traversal flaw in torrent.cpp that lets remote attackers overwrite arbitrary files by supplying torrent filenames containing ".." sequences. The issue, described as a vulnerability in KTorrent, enables partial integrity impact and cou...

CVE-2007-1384

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a torrent filename...

CVE-2007-1384

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a torrent filename...

CVE-2006-1384

IBM Tivoli Business Systems Manager (TBSM) web console component apwc_win_main.jsp is affected by a cross-site scripting (XSS) vulnerability that can be exploited via the skin parameter. The issue exists in TBSM builds prior to 3.1.0.1, allowing remote attackers to inject arbitrary web script or ...

CVE-2005-1384

CVE-2005-1384 : The phpCoin project – version 1.2.2 or older – is affected by multiple SQL injection vulnerabilities. The issues arise from improper sanitization in user-supplied input and affect the following entry points/parameters: (1) search in index.php, (2) phpcoinsessid in login.php, (3) i...

CVE-2004-1384

CVE-2004-1384 refers to multiple XSS vulnerabilities in phpGroupWare 0.9.16.003 and earlier, exploitable via parameters to index.php or ticket_id to viewticket_details.php. Related CVEs include CVE-2004-1383 (SQL injection) and CVE-2004-1385 (information disclosure). Public sources consistently d...

CVE-2004-1384

Multiple cross-site scripting XSS vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 kp3, 2 type, 3 msg, 4 forumid, 5 pos, 6 catsapp, 7 catid, 8 msgballmsgnum, 9 fldballacctnum parameters to index.php or 10 ticketid to...

phpGroupWare <= 0.9.16.003 Multiple Vulnerabilities

The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. The remote version of this software is vulnerable to multiple issues : - A cross-site scripting issue may allow an attacker to steal the credentials of third-party users of the remote host. CVE-2004-138...

CVE-2002-1384

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...

CVE-2002-1384

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...

CVE-2002-1384

CVE-2002-1384 affects pdftops in Xpdf 2.01 and earlier, Xpdf-i, and CUPS pre-1.1.18. An integer overflow in a ColorSpace entry with many elements can allow a local attacker to execute arbitrary code (via cups-pdf) on the affected host. Debian OpenVAS advisories (DSA 222-1, 226-1, 232-1/2) and his...