177 matches found
Fedora Update for php FEDORA-2011-11537
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for php-eaccelerator FEDORA-2011-11528
Check for the Version of php-eaccelerator OpenVAS Vulnerability Test Fedora Update for php-eaccelerator FEDORA-2011-11528 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Fedora Update for maniadrive FEDORA-2011-11537
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 14 : maniadrive-1.2-32.fc14 / php-5.3.8-1.fc14 / php-eaccelerator-0.9.6.1-9.fc14 (2011-11537)
Security Enhancements and Fixes : - Updated cryptblowfish to 1.2. CVE-2011-2483 - Fixed crash in errorlog. Reported by Mateusz Kocielski - Fixed buffer overflow on overlog salt in crypt. - Fixed bug 54939 File path injection vulnerability in RFC1867 File upload filename. Reported by Krzysztof...
SuSE 11.1 Security Update : man-pages (SAT Patch Number 5064)
Manual pages for several kernel and library functions were added. The crypt3 manual page was updated to also list the 2y prefix. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...
SuSE 11.1 Security Update : libxcrypt (SAT Patch Number 5041)
The security update for CVE-2011-2483 broke changing blowfish passwords if compat mode was turned on default. This update fixes the regression. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update informatio...
[slackware-security] php
New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/php-5.3.8-i486-1slack13.37.txz: Upgraded. Security fixes vs. 5.3.6 5.3.7 was not usable: Updated...
CVE-2011-2483
cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash...
CVE-2011-2483
CVE-2011-2483 affects PHP’s crypt_blowfish (used by PHP
CVE-2011-2483
cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash...
PHP 5.3 < 5.3.7 Multiple Vulnerabilities
Binary data 801087.prm...
PHP 5.3 < 5.3.7 Multiple Vulnerabilities
According to its banner, the version of PHP 5.3.x running on the remote host is prior to 5.3.7. It is, therefore, affected by the following vulnerabilities : - A use-after-free vulnerability in substrreplace. CVE-2011-1148 - A stack-based buffer overflow in socketconnect. CVE-2011-1938 - A code...
SuSE 10 Security Update : glibc (ZYPP Patch Number 7659)
The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...
CentOS Update for libtiff CESA-2010:0519 centos5 i386
Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2010:0519 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Security fix for the ALT Linux 7 package glibc version 6:2.11.3-alt5
June 21, 2011 Dmitry V. Levin 6:2.11.3-alt5 - Updated to glibc-2.11.3-61-g78856c5 with some broken commits reverted. - Updated cryptblowfish to 1.1 fixes CVE-2011-2483...
Mandriva Update for libtiff MDVSA-2010:145 (libtiff)
Check for the Version of libtiff OpenVAS Vulnerability Test Mandriva Update for libtiff MDVSA-2010:145 libtiff Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mandriva Update for libtiff MDVSA-2010:146 (libtiff)
Check for the Version of libtiff OpenVAS Vulnerability Test Mandriva Update for libtiff MDVSA-2010:146 libtiff Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mandriva Linux Security Advisory : libtiff (MDVSA-2010:146)
Multiple vulnerabilities has been discovered and corrected in libtiff : The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a...
Mandriva Update for libtiff MDVSA-2010:145 (libtiff)
Check for the Version of libtiff OpenVAS Vulnerability Test Mandriva Update for libtiff MDVSA-2010:145 libtiff Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
RHEL 4 / 5 : libtiff (RHSA-2010:0519)
Updated libtiff packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...