139 matches found
Fedora Core 6 : perl-5.8.8-12 (2007-748)
This update resolves CVE-2007-5116, fixing a security issue with perl's regex parser. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
openSUSE 10 Security Update : perl (perl-4675)
This update fixes a buffer overflow in perl's regex engine. CVE-2007-5116 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-4675. The text description of this plugin is C SUSE LLC...
Fedora 7 : perl-5.8.8-26.fc7 (2007-3255)
Resolves CVE-2007-5116: perl regular expression UTF parsing errors Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 8 : perl-5.8.8-31.fc8 (2007-3218)
Resolves: CVE-2007-5116: perl regular expression UTF parsing errors Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Perl Unicode正则表达式堆溢出漏洞
BUGTRAQ ID: 26350 CVECAN ID: CVE-2007-5116 Perl是一种免费且功能强大的编程语言。 Perl的正则表达式引擎在计算处理正则表达式所需空间的方式存在错误，本地攻击者可能利用此漏洞提升权限。 如果用户所发送到正则表达式中包含有Unicode数据的话，就会导致运行时自动切换到Unicode字符主题，之后再传送的表达式就可能触发堆溢出，导致在用户机器上执行任意指令。 Larry Wall Perl 5.8.8 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1400-1）以及相应补丁: DSA-1400-1：Ne...
CVE-2007-5116
CVE-2007-5116 is a Perl vulnerability in the 5.8 release affecting the Regular Expression Engine (regcomp.c) where a buffer overflow can allow a remote attacker to execute arbitrary code by switching from byte to Unicode in a regex. Public-facing sources in the connected documents (including a VM...
FreeBSD : perl -- regular expressions unicode data buffer overflow (5b47c279-8cb5-11dc-8878-0016179b2dd5)
Red Hat reports : A flaw was found in Perl's regular expression engine. Specially crafted input to a regular expression can cause Perl to improperly allocate memory, possibly resulting in arbitrary code running with the permissions of the user running Perl. %NASLMINLEVEL 70300 C Tenable Network...
[ MDKSA-2007:207 ] - Updated perl packages fix vulnerability
Package : perl Date : November 5, 2007 Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Tavis Ormandy and Will Drewry discovered a flaw in Perl's regular expression engine. Specially crafted input to a regular expression can cause Per...
RHEL 3 / 4 / 5 : perl (RHSA-2007:0966)
Updated Perl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration...
perl security update
CentOS Errata and Security Advisory CESA-2007:0966 Updated Perl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming...
Important: Red Hat Security Advisory: perl security update
Updated Perl packages that fix security issues for Red Hat Application Stack v1.2 are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilities an...
Important: Red Hat Security Advisory: perl security update
Updated Perl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration...
openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-2300)
This patch upgrades the phpMyAdmin package to version 2.9.1.1, including fixes for the security problems tracked by the Mitre CVE IDs CVE-2006-3388, CVE-2006-5116, CVE-2006-5117, and CVE-2006-5718. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
[SECURITY] [DSA 1207-2] New phpmyadmin packages fix regression
-------------------------------------------------------------------------- Debian Security Advisory DSA 1207-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 19th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1207-1] New phpmyadmin packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1207-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 9th, 2006 http://www.debian.org/security/faq -...
CVE-2006-5116
Multiple cross-site request forgery CSRF vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to perform unauthorized actions as another user by 1 directly setting a token in the URL though dynamic variable evaluation and 2 unsetting arbitrary variables via the REQUEST array,...
CVE-2006-5116
CVE-2006-5116 affects phpMyAdmin prior to 2.9.1-rc1, with multiple CSRF vulnerabilities that allow remote attackers to perform actions as another user by (1) setting a token in the URL via dynamic variable evaluation and (2) unsetting arbitrary variables through $_REQUEST. Affected components inc...
CVE-2006-5116
Multiple cross-site request forgery CSRF vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to perform unauthorized actions as another user by 1 directly setting a token in the URL though dynamic variable evaluation and 2 unsetting arbitrary variables via the REQUEST array,...