openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-5379)

This update of php5 fixes : - possible stack-based buffer overflow CVE-2008-2050 - incomplete escapeshellcmd CVE-2008-2051 - printf integer overflow CVE-2008-1384 - insecure GENERATESEED macro CVE-2008-2107 - timezone update for DST in Pakistan %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian DSA-1572-1 : php5 - several vulnerabilities

Several vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3806 The glob function allows context-dependent attackers to cause a denial of service and possibly...

CVE-2008-2050

CVE-2008-2050 affects PHP before 5.2.6, with a stack-based buffer overflow in the FastCGI SAPI (fastcgi.c). Connected sources corroborate the vulnerability and note that updates (e.g., openSUSE/SUSE php5 patches) fix this issue. No exploit details are provided in the documents. Mitigation: apply ...

CVE-2007-5636

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

CVE-2007-5639

The CVE-2007-5639 entry concerns Nortel UNIStim family devices (Nortel UNIStim IP Softphone 2050, IP Phone 1140E, plus other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets). The vulnerability allows remote attackers to cause a denial of service (device hang) by sending a flood of Mute/Un...

CVE-2007-5636

The CVE-2007-5636 entry concerns a buffer overflow in Nortel UNIStim IP Softphone 2050. A remote attacker can trigger the overflow by sending a flood of invalid characters to the RTCP port (5678/udp), potentially causing the application to abort and possibly allowing arbitrary code execution. The...

CVE-2007-2050

CVE-2007-2050 describes multiple directory traversal vulnerabilities in header.php of RicarGBooK 1.2.1, allowing remote attackers to include and execute arbitrary local files via a .. in either a language cookie or the language parameter. According to NVD, the impact is partial confidentiality wi...

CVE-2007-2050

Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 a lang cookie or 2 the language parameter...

CVE-2006-2050

CVE-2006-2050 affects DCScripts DCForumLite 3.0 via SQL injection in dcboard.cgi (parameter az). Root cause: improper input handling allowing arbitrary SQL execution by remote attackers. Impact: potential data exposure or modification as described in the original vulnerability note. Connected rec...

CVE-2002-2050

CVE-2002-2050 affects the ModLogAn processor_web plugin (versions 0.5.0 through 0.7.11) where the splitby option enables a directory traversal via a .. in the hostname of a log entry. This can allow local users to overwrite arbitrary files. The available references do not provide exploit details,...

CVE-2005-2050

The CVE-2005-2050 entry concerns Tor, where a memory disclosure vulnerability in the exit server’s process space could allow remote attackers to read arbitrary memory and potentially obtain key information. The description indicates this affects Tor before version 0.1.0.10. The connected sources ...

CVE-2004-2050

CVE-2004-2050 concerns eSeSIX Thintune Thin Client firmware 2.4.38 and earlier. Local users can gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the hard-coded password maertsJ in lshell, enabling a local privilege escalation. OpenVAS notes a backdoor password (jstwo) in Thintune, indi...

CVE-2002-2050

Directory traversal vulnerability in processorweb plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. dot dot in the hostname of a log entry...