PHP 5.2 < 5.2.14 Multiple Vulnerabilities

According to its banner, the version of PHP 5.2 installed on the remote host is older than 5.2.14. Such versions may be affected by several security issues : - An error exists when processing invalid XML-RPC requests that can lead to a NULL pointer dereference. bug 51288 CVE-2010-0397 - An error...

PHP unpack()函数中断处理信息泄露漏洞

CVE ID: CVE-2010-2191 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的unpack函数中存在信息泄露漏洞： char format, input, formatarg, inputarg; int formatlen, formatarglen, inputarglen; int inputpos, inputlen, i; if zendparseparametersZENDNUMARGS TSRMLSCC, "ss", &formatarg, &formatarglen, &inputarg, &inputarglen =...

PHP pack()函数中断处理信息泄露漏洞

CVE ID: CVE-2010-2191 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的pack函数中存在信息泄露漏洞： PHPFUNCTIONunpack char format, input, formatarg, inputarg; int formatlen, formatarglen, inputarglen; int inputpos, inputlen, i; if zendparseparametersZENDNUMARGS TSRMLSCC, "ss", &formatarg, &formatarglen, &inputarg...

CVE-2010-2191

The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...

CVE-2010-2191

The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...

CVE-2010-2191

CVE-2010-2191 affects PHP 5.2.x (5.2.13) and 5.3.x (5.3.2) where attackers can obtain memory contents or trigger memory corruption by interrupting an internal function/handler. The vulnerability covers multiple PHP components (parse_str, preg_match, unpack, pack) and opcodes (ZEND_FETCH_RW, ZEND_...

Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003

The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

SLES9: Security update for mailman

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mailman For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014078 within the SuS...

SuSE9 Security Update : mailman (YOU Patch Number 11243)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

CVE-2009-2191

Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in an application name...

CVE-2009-2191

CVE-2009-2191 is a format-string vulnerability in Mac OS X Login Window (affecting 10.4.11 and 10.5 up to 10.5.7; fixed in 10.5.8 via Security Update 2009-003). The issue arises from format specifiers in an application name, which can lead to arbitrary code execution or an application crash. Publ...

Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.8. Mac OS X 10.5.8 contains security fixes for the following products : - bzip2 - CFNetwork - ColorSync - CoreTypes - Dock - Image RAW - ImageIO - Kernel - launchd - Login Window - MobileMe - Networking - XQuery C Tenab...

CVE-2008-2191

The CVE-2008-2191 entry concerns a SQL injection vulnerability in the PostNuke pnEncyclopedia module (version 0.2.0 and earlier). The flaw allows an unauthenticated, remote attacker to inject arbitrary SQL via the id parameter used by the display_term action in index.php. Affected component: pnEn...

CVE-2008-2191

creationtimestamp| type| source ---|---|--- 2008-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5541...

SuSE 10 Security Update : mailman (ZYPP Patch Number 2174)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

CVE-2007-2191

CVE-2007-2191 describes multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.2.x . The flaws allow remote attackers to inject arbitrary web script or HTML via SIP-related fields (1) From, (2) To, (3) Call-ID, (4) User-Agent, and potentially other SIP headers, with the malicious data s...

CVE-2006-2191

Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable...

CVE-2006-2191

The CVE-2006-2191 entry concerns a format-string vulnerability in Mailman prior to version 2.1.9, which could allow an attacker to execute arbitrary code via unspecified vectors. The vulnerability is documented across multiple advisories and OpenVAS/Nessus entries, and several sources explicitly ...

CVE-2002-2191

This CVE affects Lotus Domino 5.0.9a and earlier. Affected component: Domino HTTP banner handling; Root cause: when a non-existent .nsf database is requested, the HTTP banner leaks the Domino version, even with DominoNoBanner=1 enabled. Impact described as potential information disclosure of vers...

CVE-2004-2191

CVE-2004-2191 describes a cross-site scripting (XSS) vulnerability in the ttt-webmaster.php component of Turbo Traffic Trader PHP 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through the parameters (1) msg[0] or (2) siteurl, potentially compromising user data or se...