RedHat Security Advisory RHSA-2009:0350

The remote host is missing updates announced in advisory RHSA-2009:0350. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted...

Mandrake Security Advisory MDVSA-2009:045 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:045. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-5934)

This update of php5 fixes a directory traversal bug in ZipArchive CVE-2008-5658 and a buffer overflow in the mstring extension CVE-2008-5557. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2008-5658

CVE-2008-5658 : A directory traversal vulnerability in PHP before or equal to 5.2.6 affects ZipArchive::extractTo, allowing a context-dependent attacker to write arbitrary files via a ZIP entry name containing .. sequences. The initial description identifies the affected software as PHP 5.2.6 and...

CVE-2007-5658

CVE-2007-5658 covers a heap-based buffer overflow in the TIBCO SmartSockets family: RTserver (6.8.0 and earlier), RTworks (before 4.0.4), and EMS (4.0.0–4.4.1). The flaw arises from processing requests that carry attacker-controlled size and copy-length values, triggering a heap overflow and enab...

iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Heap Overflow Vulnerability

iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND TIBCO SmartSockets is a message passing framework used to transport messages over disparate channels. The RTserver is the server component of the framework. More information can b...

CVE-2006-5658

The CVE-2006-5658 entry concerns the BlooMooWeb ActiveX control (AidemATL.dll). The connected sources indicate three vulnerable methods: BW_DownloadFile (bstrUrl parameter allows downloading arbitrary files), BW_LaunchGame (bstrParams parameter allows executing arbitrary local files), and BW_Dele...