openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-4909)

This update fixes multiple bugs in php by upgrading it to version 5.2.5. - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars CVE-2007-5898 - overly long arguments to the dl function could crash php CVE-2007-4825 - overy long arguments to the glob function could crash php...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 4808)

This update fixes multiple bugs in php : - use system pcre library to fix several pcre vulnerabilities. CVE-2007-1659 / CVE-2006-7230 / CVE-2007-1660 / CVE-2006-7227 / CVE-2005-4872 / CVE-2006-7228 - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars. CVE-2007-5898 - overly...

php security update

CentOS Errata and Security Advisory CESA-2007:0888-01 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an embedded-HTML scripting...

openSUSE 10 Security Update : rsync (rsync-3996)

An off by one buffer overflow within the fname function has been fixed. CVE-2007-4091 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update rsync-3996. The text...

CentOS 3 : php (CESA-2007:0889)

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server...

Moderate: php security update

4.3.2-43.ent - improve fix for CVE-2007-3996 278361 4.3.2-42.ent - add security fixes for CVE-2007-2509, CVE-2007-2756, CVE-2007-2872, CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658 278361...

php security update

CentOS Errata and Security Advisory CESA-2007:0890 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

Moderate: php security update

5.1.6-15.el5 - improve fix for CVE-2007-3997 278411 5.1.6-14.el5 - fix backport for CVE-2007-3996 278411 5.1.6-13.el5 - add security fixes for CVE-2007-2756, CVE-2007-2872, CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658, CVE-2007-4670 278411...

PHP libgd实现多个函数整数溢出漏洞

CVECAN ID: CVE-2007-3996 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的libgd实现中gdImageCreate和gdImageCreateTrueColor函数存在整数溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 这两个函数可由ImageCreate和ImageCreateTrueColor直接调用。 ... im-tpixels = int gdMallocsizeofint sy; im-AAopacity = unsigned char gdMallocsizeofunsigned char sy; ... f...

CVE-2007-3996

CVE-2007-3996 is a confirmed libgd2 vulnerability discussed in connected advisories. The issue is described as multiple integer overflows in libgd’s image resizing and creation routines, which can cause an application crash and may allow arbitrary code execution when processing large values (srcW...

CVE-2006-3996

CVE-2006-3996 affects ATutor 1.5.3.1 and earlier in the file links/index.php. The vulnerability is an SQL injection in the desc and asc parameters, allowing remote authenticated users to execute arbitrary SQL commands. The NVD records a CVSS v2 base score of 6.5 (MEDIUM) with network attack vecto...