MGASA-2016-0316 Updated curl packages fix security vulnerability

The four libcurl functions curlescape, curleasyescape, curlunescape and curleasyunescape perform string URL percent escaping and unescaping. They accept custom string length inputs in signed integer arguments. The provided string length arguments were not properly checked and due to arithmetic in...

[SECURITY] [DLA 625-1] curl security update

Package : curl Version : 7.26.0-1+wheezy16 CVE ID : CVE-2016-7167 Debian Bug : 837945 It was discovered that the four four libcurl functions curlescape, curleasyescape, curlunescape and curleasyunescape accepted negative sting length inputs. For Debian 7 "Wheezy", these problems have been fixed i...

Fedora Update for curl FEDORA-2016-7a2ed52d41

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : curl (SSA:2016-259-01)

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-259-01. The tex...

CVE-2016-7167

Multiple integer overflow flaws leading to heap-based buffer overflows were found in the way curl handled escaping and unescaping of data. An attacker could potentially use these flaws to crash an application using libcurl by sending a specially crafted input to the affected libcurl functions...

Security fix for the ALT Linux 8 package curl version 7.50.3-alt1

Sept. 14, 2016 Anton Farygin 7.50.3-alt1 - new version with security fixes CVE-2016-7167...

CVE-2008-7167

CVE-2008-7167 describes an unrestricted file upload vulnerability in Page Manager 2006-02-04, where uploading a file with an executable extension to upload.php allows remote attackers to execute arbitrary code by directly requesting the uploaded file in an unspecified directory. The issue is caus...

CVE-2008-6935

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7145 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7167...

CVE-2008-6937

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7145 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7167...

CVE-2006-7167

Technical details of CVE-2006-7167 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories; current sources reiterate an authentication bypass in ProRat Server 1.9 Fix2 without specifics.