openSUSE Security Update : nmap (openSUSE-SU-2013:1579-1)

nmap was updated to fix bnc844953/CVE-2013-4885: There was a vulnerability in one of our 437 NSE scripts. If you ran the fortunately non-default http-domino-enum-passwords script with the fortunately also non-default domino-enum-passwords.idpath parameter against a malicious server, it could caus...

openSUSE Security Update : php5 (openSUSE-SU-2012:0426-1)

php5 security update %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-182. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc'; include'compat.inc'...

PHP5 Hash Collision Denial Of Service - Ver2 (CVE-2011-4885)

A denial-of-service vulnerability has been reported in PHP. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

CVE-2013-4885

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences...

CVE-2013-4885

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences...

CVE-2013-4885

CVE-2013-4885 affects the Nmap NSE script http-domino-enum-passwords.nse (pre-6.40). When domino-enum-passwords.idpath is set, a crafted FullName response can cause the remote server to write arbitrarily named files via directory traversal sequences. The vulnerability is tied to the NSE script lo...

MGASA-2013-0305 Updated nmap package fixes CVE-2013-4885

Updated nmap packages fix security vulnerability: It is possible to write arbitrary files to a remote system, through a specially crafted server response for NMAP http-domino-enum-passwords.nse script from nmap before 6.40 CVE-2013-4885...

Updated nmap package fixes CVE-2013-4885

Updated nmap packages fix security vulnerability: It is possible to write arbitrary files to a remote system, through a specially crafted server response for NMAP http-domino-enum-passwords.nse script from nmap before 6.40 CVE-2013-4885...

Amazon Linux AMI : php (ALAS-2012-37)

It was found that the hashing routine used by PHP arrays was susceptible to predictable hash collisions. If an HTTP POST request to a PHP application contained many parameters whose names map to the same hash value, a large amount of CPU time would be consumed. This flaw has been mitigated by...

Amazon Linux AMI : php (ALAS-2012-41)

It was discovered that the fix for CVE-2011-4885 introduced an uninitialized memory use flaw. A remote attacker could send a specially crafted HTTP request to cause the PHP interpreter to crash or, possibly, execute arbitrary code. C Tenable Network Security, Inc. The descriptive text and package...

Nmap 任意文件写漏洞(CVE-2013-4885）

BUGTRAQ ID: 62024 CVECAN ID: CVE-2013-4885 nmap是一款用于网络发现（Network Discovery）和安全审计（Security Auditing）的网络安全工具，它是自由软件。 Nmap 6.25在http-domino-enum-passwords NSE脚本内存在任意文件上传漏洞，攻击者可利用此漏洞以当前用户权限写任意文件。 0 Nmap 6.25 厂商补丁： Nmap ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://nmap.org/download.html nmap --script...

Fedora Update for nmap FEDORA-2013-14786

Check for the Version of nmap OpenVAS Vulnerability Test Fedora Update for nmap FEDORA-2013-14786 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for nmap FEDORA-2013-14786

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : nmap-6.40-1.fc18 (2013-14786)

updated for 6.40 - fixes CVE-2013-4885 nmap: arbitrary file upload flaw in http-domino-enum-passwords NSE script Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

CVE-2013-4885

creationtimestamp| type| source ---|---|--- 2013-08-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38741...

Oracle Linux 4 : php (ELSA-2012-0071)

From Red Hat Security Advisory 2012:0071 : Updated php packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whi...

Oracle Linux 5 : php (ELSA-2012-0033)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0033 advisory. 5.1.6-27.4 - add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708, CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 769756...

Gentoo Security Advisory GLSA 201209-03 (php)

The remote host is missing updates announced in advisory GLSA 201209-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2012-4885

The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service infinite loop via certain input, as demonstrated by the padleft function...

CVE-2012-4885

The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service infinite loop via certain input, as demonstrated by the padleft function...