118 matches found
Fedora 11 : xerces-c27-2.7.0-8.fc11 (2009-8332)
This update fixes : - Bug 515515 - CVE-2009-1885 xerces-c, xerces-c27: Stack overflow when parsing recursive XML structures Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Fedora 10 : xerces-c-2.8.0-5.fc10 (2009-8350)
This update fixes : - Bug 515515 - CVE-2009-1885 xerces-c, xerces-c27: Stack overflow when parsing recursive XML structures Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
openSUSE Security Update : Xerces-c (Xerces-c-1204)
The Xerces-c package was vulnerable to various bugs while parsing XML. CVE-2009-1885 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update Xerces-c-1204. The text description of this plugin is C SUS...
openSUSE Security Update : Xerces-c (Xerces-c-1204)
The Xerces-c package was vulnerable to various bugs while parsing XML. CVE-2009-1885 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update Xerces-c-1204. The text description of this plugin is C SUS...
CVE-2009-1885
Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrat...
CVE-2009-1885
The CVE-2009-1885 entry concerns a stack-consumption vulnerability in Apache Xerces-C++ (validator DTDScanner.cpp) affecting Xerces-C++ 2.7.0 and 2.8.0, enabling a context-dependent DoS (crash) via deeply nested DTD structures and invalid byte values, as demonstrated by the XML fuzzing framework....
CVE-2008-1885
CVE-2008-1885 affects the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) used by CDNetworks Nefficient Download. A directory traversal via .. in the SkinPath parameter and a .zip URL in HttpSkin can enable a remote attacker to download arbitrary code to a client system, with the note tha...
CVE-2008-1885
creationtimestamp| type| source ---|---|--- 2008-04-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5397...
CVE-2007-1885
Integer overflow in the strreplace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via a single character search string in conjunction with a long replacement string, which overflows a 32 bit length counter. NOTE: this is probably...
CVE-2007-1885
CVE-2007-1885 describes an integer overflow in PHP’s str_replace function (PHP 4 before 4.4.5 and PHP 5 before 5.2.1) that can be triggered by a single-character search string and a long replacement string, overflowing a 32-bit length counter. This context-dependent vulnerability could allow an a...
Integer overflow
Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the 1 session, 2 zip, 3 imap, and 4 sqlite extensions; 5 stream filters; and the 6 strreplace, 7 mail, 8 ibasedeleteuser, 9 ibaseadduser, and 1...
CVE-2007-0906
Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the 1 session, 2 zip, 3 imap, and 4 sqlite extensions; 5 stream filters; and the 6 strreplace, 7 mail, 8 ibasedeleteuser, 9 ibaseadduser, and 1...
CVE-2006-1885
Technical details about CVE-2006-1885 are not publicly provided in the connected documents. Monitor for updates; current sources list the vulnerability as multiple unspecified issues in Oracle Enterprise Manager Reporting Framework with unknown impact and attack vectors.
WS_FTP Server Multiple Vulnerabilities (Nov 2005)
WSFTP Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ipswitch:wsftpserver";...
CVE-2005-1885
YaPiG is a PHP-based image gallery. CVE-2005-1885 affects YaPiG 0.92b/0.93u/0.94u, where view.php accepts a phid parameter that is not required to be an integer, causing an error message that reveals the filesystem path. OpenVAS notes this within YaPiG’s broader set of flaws (including remote/loc...
CVE-2004-1885
WS_FTP Server 4.0.2 is affected by CVE-2004-1885. The vulnerability allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify iFtpSvc options processed by iftpmgr.exe. This is a local/remote code-execution style impact described in the records, ...
CVE-2004-1885
Ipswitch WSFTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe...