100 matches found
php security update
CentOS Errata and Security Advisory CESA-2013:0514 Updated php packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common...
RedHat Update for php RHSA-2013:0514-02
Check for the Version of php OpenVAS Vulnerability Test RedHat Update for php RHSA-2013:0514-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
RedHat Update for php RHSA-2013:0514-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RHEL 6 : php (RHSA-2013:0514)
Updated php packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...
Moderate: Red Hat Security Advisory: php security, bug fix and enhancement update
Updated php packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...
SuSE 11.2 Security Update : PHP5 (SAT Patch Number 6778)
This update fixes CVE-2011-1398 / CVE-2011-4388 header injection via CR. This update also changes the default configuration to use FilesMatch with 'SetHandler' rather than 'AddHandler' to protect weakly written web applications from content confusion. Since this is a hardening measure, no CVE was...
SuSE 11.2 Security Update : PHP5 (SAT Patch Number 6777)
This update fixes CVE-2011-1398 / CVE-2011-4388 header injection via CR. This update also changes the default configuration to use FilesMatch with 'SetHandler' rather than 'AddHandler' to protect weakly written web applications from content confusion. Since this is a hardening measure, no CVE was...
Gentoo Security Advisory GLSA 201209-03 (php)
The remote host is missing updates announced in advisory GLSA 201209-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8293)
This update fixes header code injection issues in PHP5. CVE-2011-1398 / CVE-2011-4388 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid62198; scriptversion"1.5";...
Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : php5 vulnerabilities (USN-1569-1)
It was discovered that PHP incorrectly handled certain character sequences when applying HTTP response-splitting protection. A remote attacker could create a specially crafted URL and inject arbitrary headers. CVE-2011-1398, CVE-2012-4388 It was discovered that PHP incorrectly handled directories...
USN-1569-1: PHP vulnerabilities
It was discovered that PHP incorrectly handled certain character sequences when applying HTTP response-splitting protection. A remote attacker could create a specially-crafted URL and inject arbitrary headers. CVE-2011-1398, CVE-2012-4388 It was discovered that PHP incorrectly handled directories...
FreeBSD Ports: php5
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2011-1398
CVE-2011-1398 affects PHP’s SAPI handling: the sapi_header_op function in main/SAPI.c does not check for %0D (carriage return) sequences, allowing HTTP response-splitting bypass via crafted URLs. Affected versions are PHP before 5.3.11 and 5.4.x before 5.4.0RC2. The issue is described in multiple...
CVE-2011-1398
The sapiheaderop function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences aka carriage return characters, which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction betwe...
Ubuntu Update for ldm USN-1398-1
Ubuntu Update for Linux kernel vulnerabilities USN-1398-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13981.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ldm USN-1398-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
Ubuntu: Security Advisory (USN-1398-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-1398
Unspecified vulnerability in the GO WeiboWidget com.gau.go.launcherex.gowidget.weibowidget application 2.4 for Android has unknown impact and attack vectors...
CVE-2012-1398
Technical details about CVE-2012-1398 are not publicly available in the provided documents. Monitor for updates from referenced sources and connected records for potential specifics on affected components, impact, and remediation.
