Fedora Update for php FEDORA-2010-19011

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2010-19011 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for php-eaccelerator FEDORA-2010-18976

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for php-eaccelerator FEDORA-2010-18976

Check for the Version of php-eaccelerator OpenVAS Vulnerability Test Fedora Update for php-eaccelerator FEDORA-2010-18976 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for maniadrive FEDORA-2010-19011

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for php MDVSA-2010:254 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:254 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDVSA-2010:254 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:254 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

[slackware-security] php

New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/php-5.2.16-i486-1slack13.1.txz: Upgraded. This fixes many bugs, including some security issues. For more...

FreeBSD : php -- multiple vulnerabilities (5353)

The following package needs to be updated: php52 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the VuXML entry has been cancelled. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques...

PHP 5.2 < 5.2.15 Multiple Vulnerabilities

According to its banner, the version of PHP 5.2 installed on the remote host is older than 5.2.15. Such versions may be affected by several security issues : - A crash in the zip extract method. - A possible double free exists in the imap extension. CVE-2010-4150 - An unspecified flaw exists in...

PHP ZipArchive::getArchiveComment()函数空指针引用拒绝服务漏洞

BUGTRAQ ID: 44718 CVE ID: CVE-2010-3709 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 ZipArchive库允许透明的读写ZIP压缩档案及其之中的文件。对于PHP中所使用的ZipArchive::getArchiveComment函数： - --- 1945 static ZIPARCHIVEMETHODgetArchiveComment 1946 1947 struct zip intern; 1948 zval this = getThis; 1949 long flags = 0; 1950 const ch...

CVE-2010-3709

CVE-2010-3709 affects PHP’s ZipArchive::getArchiveComment: vulnerable in PHP 5.2.x up to 5.2.14 and 5.3.x up to 5.3.3, enabling context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP archive. Connected documents ( MiracleLinux AXSA advisory...

PHP 5.3.3/5.2.14 - ZipArchive::getArchiveComment Null Pointer Dereference

PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 14.09.2010 - Pub.: 05.11.2010 CVE: CVE-2010-3709 CWE: CWE-476 Status: Fixed in CVS Affected Software: - PHP 5.3.3 - PHP 5.2.14 Original...

PHP 5.3.35.2.14 - ZipArchive::getArchiveComment Null Pointer Dereference

PHP 5.3.35.2.14 - ZipArchive::getArchiveComment Null Pointer Dereference PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 14.09.2010 - Pub.: 05.11.2010 CVE: CVE-2010-3709 CWE: CWE-476...

[ MDVSA-2010:218 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:218 http://www.mandriva.com/security/ Package : php Date : October 31, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities were...

CVE-2009-3709

The CVE-2009-3709 entry concerns Alleycode HTML Editor 2.21 from Konae Technologies. A stack-based buffer overflow in the Meta Content Optimizer allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag. Public records (NVD/OpenVAS entries) confirm remote cod...

CVE-2009-3709

creationtimestamp| type| source ---|---|--- 2009-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9991 2009-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9866...

Fedora Core 10 FEDORA-2009-3709 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory FEDORA-2009-3709. OpenVAS Vulnerability Test $Id: fcore20093709.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3709 ghostscript Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 10 FEDORA-2009-3709 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory FEDORA-2009-3709. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

CVE-2008-3709

CVE-2008-3709 describes multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21. The issue allows remote attackers to inject arbitrary web script or HTML via parameters in options.php (lOptionsOptions, lNavAdminOptions) or subscribe.php (lNavReturn). The connected records co...

CVE-2007-3709

The CVE-2007-3709 entry concerns a CRLF injection in CodeIgniter 1.5.3. The vulnerability lies in the redirect function of url_helper.php, where an unspecified parameter can be tainted to inject arbitrary HTTP headers via CRLF sequences, as demonstrated by a Set-Cookie header. Affected product/ve...