Slackware 12.0 / 12.1 / current : php (SSA:2008-339-01)

New php packages are available for Slackware 12.0, 12.1, and -current to fix security issues, as well as make improvements and fix bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory...

[security bulletin] HPSBTU02382 SSRT080132 rev.1 - HP Secure Web Server for Tru64 UNIX or Internet Express for Tru64 UNIX running PHP, Remote Denial of Service (DoS) or Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01599836 Version: 1 HPSBTU02382 SSRT080132 rev.1 - HP Secure Web Server for Tru64 UNIX or Internet Express for Tru64 UNIX running PHP, Remote Denial of Service DoS or Arbitrary Code Execution...

Gentoo Security Advisory GLSA 200811-05 (php)

The remote host is missing updates announced in advisory GLSA 200811-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200811-05 (php)

The remote host is missing updates announced in advisory GLSA 200811-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 5661)

This update fixes some overflows in the gd extension and the memnstr function that could crash php or even cause a buffer overflow CVE-2008-3658 / CVE-2008-3659 In addition it fixes a bug in gd support. bnc411272 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-5546)

CVE-2008-3658, CVE-2008-3659 and CVE-2008-3660 have been fixed in the php5 update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update apache2-modphp5-5546. The text description of this plugin is ...

CVE-2008-3658

CVE-2008-3658 : In PHP, a buffer overflow in the imageloadfont function (ext/gd/gd.c) affects PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6. A context-dependent attacker can crash the interpreter and, possibly, execute arbitrary code via a crafted font file. Affected products: PHP 4.4.x and ...

CVE-2007-3658

Technical details (affected products, components, root cause, versions, or remediation) are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2006-3658

Microsoft Internet Explorer 6 is affected by CVE-2006-3658. The flaw occurs when accessing the object references of a FolderItem ActiveX object, triggering a null dereference in the security check and enabling a remote attacker to cause a denial of service (crash). The connected sources do not pr...

CVE-2005-3658

EMC Legato NetWorker (and related Sun Solstice Backup and StorEdge EBS lines) is affected by CVE-2005-3658 due to multiple heap-based buffer overflows when processing malformed RPC requests. Affected versions include NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, with similar expo...