PHP 5.3.x < 5.3.23 Multiple Vulnerabilities

According to its banner, the version of PHP 5.3.x installed on the remote host is prior to 5.3.23. It is, therefore, potentially affected by multiple vulnerabilities: - An error exists in the file 'ext/soap/soap.c' related to the 'soap.wsdlcachedir' configuration directive and writing cache files...

PHP 5.4.x < 5.4.13 Information Disclosure

According to its banner, the version of PHP 5.4.x installed on the remote host is prior to 5.4.13. It is, therefore, potentially affected by an information disclosure vulnerability. The 5.4.12 fix for CVE-2013-1635 / CVE-2013-1643 was incomplete and an error still exists in the files...

Fedora Update for php FEDORA-2013-3891

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2013-3891 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for php FEDORA-2013-3927

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php FEDORA-2013-3927

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2013-3927 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for php FEDORA-2013-3891

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"php...

Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 14.0 / current : php (SSA:2013-081-01)

New php packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-081-01. The text...

CVE-2013-1635

ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdlcachedir directive and the openbasedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an...

BELL-CVE-2013-1635 CVE-2013-1635 does not affect BellSoft software

Bulletin has no description...

CVE-2013-1635

CVE-2013-1635 affects PHP prior to 5.3.22 and 5.4.x prior to 5.4.13. The issue is that ext/soap/soap.c does not validate the relationship between soap.wsdl_cache_dir and open_basedir, enabling an attacker to cause SOAP WSDL cache files to be created in an arbitrary directory and bypass access res...

[SECURITY] [DSA 2639-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2639-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 05, 2013 http://www.debian.org/security/faq -...

PHP 5.4.x < 5.4.12 Multiple Vulnerabilities

Binary data 6708.prm...

PHP 5.3.x < 5.3.22 Multiple Vulnerabilities

Binary data 6707.prm...

PHP 5.3.x < 5.3.22 Multiple Vulnerabilities

Binary data 801086.prm...

Ubuntu: Security Advisory (USN-1635-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1635

The hooknodeaccess function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML...

CVE-2012-1635

The CVE-2012-1635 issue affects the Drupal Revisioning module (7.x-1.x) prior to 7.x-1.3. The hook_node_access() implementation checks the current user’s permissions even when evaluating access for other user accounts, enabling bypass of intended access restrictions (notably demonstrated via the ...

Gentoo Security Advisory GLSA 201206-22 (Samba)

The remote host is missing updates announced in advisory GLSA 201206-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201206-22 (Samba)

The remote host is missing updates announced in advisory GLSA 201206-22. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

SA-CONTRIB-2012-009 - Revisioning - Access bypass

CVE: CVE-2012-1635 This module enables you to create moderation publication workflows, allowing authors to create content that isn't visible to the public until it has been approved by a moderator/publisher. The module's implementation of hooknodeaccess assumes that access is to granted/denied...