10734 matches found
DSA-3069-1 curl - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3069-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SOL15807 - cURL and libcurl vulnerability CVE-2014-1263
Recommended action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. Supplemental...
Drupal 7.0 7.31 - Drupalgeddon SQL Injection (Remote Code Execution)
Drupal 7.0 7.31 - Drupalgeddon SQL Injection Remote Code Execution // and Stefan Esser //· include 'common.inc'; include 'password.inc'; // set values $userid = 0; $username = ''; $codeinject = 'phpinfo;sessiondestroy;die"";'; $url = isset$argv1?$argv1:''; $code = isset$argv2?$argv2:''; if $url =...
Fedora 21 : php-5.6.2-1.fc21 (2014-12983)
16 Oct 2014, PHP 5.6.2 Core : - Fixed bug 68044 Integer overflow in unserialize 32-bits only. CVE-2014-3669 Stas cURL : - Fixed bug 68089 NULL byte injection - cURL lib. Stas EXIF : - Fixed bug 68113 Heap corruption in exifthumbnail. CVE-2014-3670 Stas XMLRPC : - Fixed bug 68027 Global buffer...
[USN-2391-1] php5 vulnerabilities
========================================================================== Ubuntu Security Notice USN-2391-1 October 30, 2014 php5 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Ubuntu 14.04 LTS : php5 vulnerabilities (USN-2391-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2391-1 advisory. Symeon Paraschoudis discovered that PHP incorrectly handled the mkgmtime function. A remote attacker could possibly use this issue to cause PHP to crash,...
Ubuntu: Security Advisory (USN-2391-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2391-1 php5 vulnerabilities
Symeon Paraschoudis discovered that PHP incorrectly handled the mkgmtime function. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. CVE-2014-3668 Symeon Paraschoudis discovered that PHP incorrectly handled unserializing objects. A remote...
USN-2391-1: php5 vulnerabilities
Symeon Paraschoudis discovered that PHP incorrectly handled the mkgmtime function. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. CVE-2014-3668 Symeon Paraschoudis discovered that PHP incorrectly handled unserializing objects. A remote...
Fedora 19 : php-5.5.18-1.fc19 (2014-13031)
16 Oct 2014, PHP 5.5.18 Core : - Fixed bug 67985 Incorrect last used array index copied to new array after unset. Tjerk - Fixed bug 67739 Windows 8.1/Server 2012 R2 OS build number reported as 6.2 instead of 6.3. Christian Wenz - Fixed bug 67633 A foreach on an array returned from a function not...
Updated php packages fix security vulnerabilities
An integer overflow flaw in PHP's unserialize function was reported. If unserialize were used on untrusted data, this issue could lead to a crash or potentially information disclosure CVE-2014-3669. A heap corruption issue was reported in PHP's exifthumbnail function. A specially-crafted JPEG ima...
MGASA-2014-0430 Updated php packages fix security vulnerabilities
An integer overflow flaw in PHP's unserialize function was reported. If unserialize were used on untrusted data, this issue could lead to a crash or potentially information disclosure CVE-2014-3669. A heap corruption issue was reported in PHP's exifthumbnail function. A specially-crafted JPEG ima...
Fedora 20 : php-5.5.18-1.fc20 (2014-13013)
16 Oct 2014, PHP 5.5.18 Core : - Fixed bug 67985 Incorrect last used array index copied to new array after unset. Tjerk - Fixed bug 67739 Windows 8.1/Server 2012 R2 OS build number reported as 6.2 instead of 6.3. Christian Wenz - Fixed bug 67633 A foreach on an array returned from a function not...
PHP 5.4.x < 5.4.34 / 5.5.x < 5.5.18 / 5.6.x < 5.6.2 Multiple Vulnerabilities
Binary data 8563.prm...
PHP 5.4.x < 5.4.34 Multiple Vulnerabilities
According to its banner, the version of PHP 5.4.x installed on the remote host is prior to 5.4.34. It is, therefore, affected by the following vulnerabilities : - A buffer overflow error exists in the function 'mkgmtime' that can allow application crashes or arbitrary code execution. CVE-2014-366...
PHP 5.6.x < 5.6.2 Multiple Vulnerabilities
According to its banner, the version of PHP 5.6.x installed on the remote host is prior to 5.6.2. It is, therefore, affected by the following vulnerabilities : - A buffer overflow error exists in the function 'mkgmtime' that can allow application crashes or arbitrary code execution. CVE-2014-3668...
Bosch Security Systems DVR 630/650/670 Series - Multiple Vulnerabilities
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2014-10-01 Bosch Security Systems DVR 630/650/670 Series Multiple Vulnerabilities Device: "The Bosch Video Recorder 630/650 Seri...
Amazon Linux AMI : curl (ALAS-2014-407)
libcurl wrongly allows cookies to be set for TLDs, thus making them much broader then they are supposed to be allowed to. This can allow arbitrary sites to set cookies that then would get sent to a different and unrelated site or domain. By not detecting and rejecting domain names for partial...
F5 Networks BIG-IP : cURL buffer overflow vulnerability (SOL4447)
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...