Fedora 15 : maniadrive-1.2-32.fc15.1 / php-5.3.9-1.fc15 / php-eaccelerator-0.9.6.1-9.fc15.1 (2012-0420)

Security Enhancements and Fixes in PHP 5.3.9 : - Added maxinputvars directive to prevent attacks based on hash collisions. CVE-2011-4885 - Fixed bug 60150 Integer overflow during the parsing of invalid exif header. CVE-2011-4566 Full upstream changelog : http://www.php.net/ChangeLog-5.php5.3.9 No...

Fedora 16 : maniadrive-1.2-32.fc16.1 / php-5.3.9-1.fc16 / php-eaccelerator-0.9.6.1-9.fc16.1 (2012-0504)

Security Enhancements and Fixes in PHP 5.3.9 : - Added maxinputvars directive to prevent attacks based on hash collisions. CVE-2011-4885 - Fixed bug 60150 Integer overflow during the parsing of invalid exif header. CVE-2011-4566 Full upstream changelog : http://www.php.net/ChangeLog-5.php5.3.9 No...

Medium: php

Issue Overview: It was found that the hashing routine used by PHP arrays was susceptible to predictable hash collisions. If an HTTP POST request to a PHP application contained many parameters whose names map to the same hash value, a large amount of CPU time would be consumed. This flaw has been...

php security update

CentOS Errata and Security Advisory CESA-2012:0033 Updated php packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

RHEL 5 / 6 : php53 and php (RHSA-2012:0019)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0019 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was found that the hashing routine used by PHP...

FreeBSD : php -- multiple vulnerabilities (d3921810-3c80-11e1-97e8-00215c6a37bb)

php development team reports : Security Enhancements and Fixes in PHP 5.3.9 : - Added maxinputvars directive to prevent attacks based on hash collisions. CVE-2011-4885 - Fixed bug 60150 Integer overflow during the parsing of invalid exif header. CVE-2011-4566 %NASLMINLEVEL 70300 C Tenable Network...

Moderate: Red Hat Security Advisory: php53 and php security update

Updated php53 and php packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

php53 and php security update

5.3.3-3.5 - remove extra php.ini-prod/devel files caused by %patch -b 5.3.3-3.4 - add security fixes for CVE-2011-4885, CVE-2011-4566 769754...

PHP EXIF Header DoS Vulnerability - Windows

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

CVE-2011-4566

CVE-2011-4566 is an integer overflow in the exif extension (exif_process_IFD_TAG) of PHP, triggered on 32‑bit platforms by a crafted EXIF header in a JPEG. This allows remote attackers to read arbitrary memory or cause a denial of service. The CVE is acknowledged in multiple advisories (Debian, C...

SIPDroid Agent User Enumeration

=====Tempest Security Intelligence - Advisory 01/2011 ======================================================================================================================== User enumeration in SIPDroid Agent ---------------------------------- Author: Anibal Vaz Marques de Aguiar =====Table of...

Citrix Access Gateway Command Execution

$Id: citrixaccessgatewayexec.rb 11873 2011-03-03 20:51:12Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Citrix Access Gateway - Command Execution (Metasploit)

$Id: citrixaccessgatewayexec.rb 11873 2011-03-03 20:51:12Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-4566

The CVE affects Citrix Access Gateway where the web authentication form in NT4 authentication (Enterprise Edition 9.2-49.8 and earlier) and the NTLM component in Standard/Advanced editions before 5.0 allows attackers to inject shell metacharacters in the password field to execute arbitrary comman...

CVE-2010-4566

creationtimestamp| type| source ---|---|--- 2010-12-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15806 2011-03-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16916 2018-05-29 15:50:33+00:00| seen|...

Citrix Access Gateway Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VSR Security Advisory http://www.vsecurity.com/ - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Citrix Access Gateway Command Injection Vulnerability Release Date: 2010-12-21 Application: Citrix Access...

CVE-2009-4566

SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4566

SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4566

The CVE-2009-4566 entry relates to Zenphoto 1.2.5, where the vulnerability lies in index.php’s news action. The issue is a SQL injection via the title parameter, enabling remote attackers to execute arbitrary SQL commands. The affected component is the web application’s handling of the title fiel...

Mozilla Products Regular Expressions Heap Corruption (CVE-2006-4566)

The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. The browser application has a built-in JavaScript interpreter which also allows client side scripting and is normally used for dynamic...