115 matches found
Fedora Core 6 : php-5.1.6-3.6.fc6 (2007-503)
This update fixes a number of security issues in PHP. A heap buffer overflow flaw was found in the PHP 'xmlrpc' extension. A PHP script which implements an XML-RPC server using this extension could allow a remote attacker to execute arbitrary code as the 'apache' user. Note that this flaw does no...
Mandrake Linux Security Advisory : php (MDKSA-2007:102)
A heap buffer overflow flaw was found in the xmlrpc extension for PHP. A script that implements an XML-RPC server using this extension could allow a remote attacker to execute arbitrary code as the apache user. This flaw does not, however, affect PHP applications using the pure-PHP XMLRPC class...
php security update
CentOS Errata and Security Advisory CESA-2007:0349 Updated PHP packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language...
Important: Red Hat Security Advisory: php security update
Updated PHP packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A hea...
CVE-2007-1864
Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors...
Important: php security update
4.3.9-3.22.5 - add security fix for CVE-2007-1864, FTP CRLF injection issue 239017...
CVE-2007-1864
CVE-2007-1864 is a heap buffer overflow in the bundled libxmlrpc extension of PHP. Affected environments: PHP before 4.4.7 and PHP 5.x before 5.2.2. The available connected documents describe this vulnerability as exploitable via remote input in the xmlrpc extension that could lead to code execut...
Fedora Core 4 : kernel-2.6.16-1.2108_FC4 (2006-517)
Mark Moseley reported that a chroot environment on a SMB share can be left via 'cd ..'. Similar to CVE-2006-1863 issue with cifs, this fix is for smbfs. CVE-2006-1864 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0008 Synopsis: VMware ESX Server 2.0.2 Upgrade Patch 2 Patch URL: http://www.vmware.com/download/esx/esx-202-200610-patch.html...
RHEL 4 : kernel (RHSA-2006:0493)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
CVE-2002-1864
The vulnerability CVE-2002-1864 affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0, where a directory traversal flaw allows remote attackers to read arbitrary files via a .. in an HTTP request. The connected sources consistently describe the issue, but no remediation, patch version, or ...
CVE-2005-1864
Calendarix Advanced
mIRC DCC Get Dialog File Spoofing Weakness
Binary data 1864.prm...
CVE-2004-1864
SQL injection vulnerability in Extreme Messageboard XMB 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to 1 member.php, 2 misc.php, or 3 today.php...
CVE-2024-1864
CVE-2024-1864 is a duplicate of CVE-2023-2813 and is not a separate vulnerability entry. The connected NUCLEI template for CVE-2023-2813 describes a reflected XSS in WordPress themes (Aapna/Anand/Anfaust/Arendelle/… and more) where the search box reflects results, allowing an unauthenticated atta...