130 matches found
Ubuntu 6.06 LTS / 6.10 / 7.04 : php5 vulnerabilities (USN-455-1)
Stefan Esser discovered multiple vulnerabilities in the 'Month of PHP bugs'. The substrcompare function did not sufficiently verify its length argument. This might be exploited to read otherwise unaccessible memory, which might lead to information disclosure. CVE-2007-1375 The shared memory shmop...
Fedora 7 : php-5.2.4-1.fc7 (2007-2215)
This update includes the latest release of PHP 5.2. A number of security issues have been fixed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
USN-455-1: PHP vulnerabilities
Stefan Esser discovered multiple vulnerabilities in the "Month of PHP bugs". The substrcompare function did not sufficiently verify its length argument. This might be exploited to read otherwise unaccessible memory, which might lead to information disclosure. CVE-2007-1375 The shared memory shmop...
CVE-2007-1887
CVE-2007-1887 concerns a buffer overflow in the sqlite_decode_binary function in the bundled sqlite library used by PHP. The issue affects PHP 4 before 4.4.5 and PHP 5 before 5.2.1, where an empty parameter value to sqlite_udf_decode_binary (0x01 character input) can enable context-dependent arbi...
CVE-2006-1887
Technical details are not publicly available in the provided documents for CVE-2006-1887; monitor for updates.
Solaris 10 (x86) : 118345-13
SunOS 5.10x86: ld & libc.so.1 Patch. Date this patch was last updated by Sun : Jan/10/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
CVE-2005-1887
Unknown vulnerability in the Sun Solaris C library libc and libproject in Solaris 10 allows local users to gain privileges...
CVE-2005-1887
CVE-2005-1887 affects Sun Solaris 10 libc.so.1/libc and libproject components. Connected documents indicate Solaris 10 SPARC patch 119689-07 and x86 patch 118345-13 address the issue; patches target libc.so.1. The vulnerability is described as allowing local privilege escalation, with local acces...
CVE-2004-1887
CVE-2004-1887 affects Ada Image Server (ImgSvr) 0.4. The vulnerability allows remote attackers to view directories or download files by making an HTTP request with a trailing %00 (null). The NVD entry notes a network attack vector with low complexity and no authentication required, resulting in p...