rt42 -- vulnerabilities related to shellshock

Best Practical reports: RT 4.2.0 and above may be vulnerable to arbitrary execution of code by way of CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, or CVE-2014-6271 -- collectively known as "Shellshock." This vulnerability requires a privileged user with access to an RT instance...

CVE-2014-7227

creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-10-01...

Scientific Linux Security Update : pcre on SL5.x i386/x86_64

This importance of this has been reduced to 'Important' We have renumbered the release for SL5 so that it doesn't conflict with the previous pcre security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc';...

GeoServer Memory Corruption Vulnerability

This host is installed with GeoServer and is prone to Memory Corruption vulnerability. OpenVAS Vulnerability Test $Id: secpodgeoservermemcorrvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ GeoServer Memory Corruption Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

GeoServer < 1.6.1, 1.7.x < 1.7.0-beta1 DoS Vulnerability

GeoServer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:geoserver:geoserver"...

CVE-2008-7227

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors...

CentOS 4 : pcre (CESA-2007:1052)

Updated pcre packages that correct security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 15 November 2007 Further analysis of these flaws in PCRE has led to the single C...

SuSE Update for php4, php5 SUSE-SA:2008:004

Check for the Version of php4, php5 OpenVAS Vulnerability Test $Id: gbsuse2008004.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for php4, php5 SUSE-SA:2008:004 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Gentoo Security Advisory GLSA 200711-30 (libpcre)

The remote host is missing updates announced in advisory GLSA 200711-30. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200805-11 (chicken)

The remote host is missing updates announced in advisory GLSA 200805-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200801-19 (goffice)

The remote host is missing updates announced in advisory GLSA 200801-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 4808)

This update fixes multiple bugs in php : - use system pcre library to fix several pcre vulnerabilities. CVE-2007-1659 / CVE-2006-7230 / CVE-2007-1660 / CVE-2006-7227 / CVE-2005-4872 / CVE-2006-7228 - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars. CVE-2007-5898 - overly...

PCRE: Multiple vulnerabilities

Background PCRE is a library providing functions for Perl-compatible regular expressions. Description Tavis Ormandy Google Security discovered multiple vulnerabilities in PCRE. He reported an error when processing "\Q\E" sequences with unmatched "\E" codes that can lead to the compiled bytecode...

CVE-2006-7227

Integer overflow in Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns namecount or long subpattern names maxnamesize, which triggers a buffer overflow. NOT...

CVE-2006-7227

Integer overflow in Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns namecount or long subpattern names maxnamesize, which triggers a buffer overflow. NOT...

CVE-2006-7227

Integer overflow in Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns namecount or long subpattern names maxnamesize, which triggers a buffer overflow. NOT...

CVE-2006-7227

Integer overflow in Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns namecount or long subpattern names maxnamesize, which triggers a buffer overflow. NOT...

CVE-2006-7227

CVE-2006-7227 : Integer overflow in the PCRE library (pre-6.7) allows a context-dependent attacker to execute arbitrary code via a regex containing a large number of named subpatterns (name_count) or very long subpattern names (max_name_size). This triggers a buffer overflow. Affected: PCRE prior...

RHEL 4 / 5 : pcre (RHSA-2007:1052)

Updated pcre packages that correct security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 15 November 2007 Further analysis of these flaws in PCRE has led to the single C...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that correct security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 15 November 2007 Further analysis of these flaws in PCRE has led to the single C...