3025 matches found
libpcre: Heap integer overflow
Background libpcre is a library providing functions for Perl-compatible regular expressions. Description libpcre fails to check certain quantifier values in regular expressions for sane values. Impact An attacker could possibly exploit this vulnerability to execute arbitrary code by sending...
USN-173-1: PCRE vulnerability
A buffer overflow has been discovered in the PCRE, a widely used library that provides Perl compatible regular expressions. Specially crafted regular expressions triggered a buffer overflow. On systems that accept arbitrary regular expressions from untrusted users, this could be exploited to...
CVE-2005-2491
Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow...
DEBIAN-CVE-2005-2491
Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow...
CVE-2005-2491
CVE-2005-2491 refers to an integer overflow in PCRE’s quantifier parsing (PCRE before 6.2) that can cause a heap-based buffer overflow, enabling arbitrary code execution when reg-exes are crafted. Affected software includes programs that embed PCRE (e.g., Python, PHP, and other apps). Connected d...
CVE-2005-2491
Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow...
DEBIAN-CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
CVE-2005-0202
Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...
Mozilla SuiteFirefox - JavaScript Lambda Replace Heap Memory Disclosure
Mozilla SuiteFirefox - JavaScript Lambda Replace Heap Memory Disclosure source: https://www.securityfocus.com/bid/12988/info Mozilla Suite/Firefox are reported prone to a memory-disclosure vulnerability. This issue can allow a remote attacker to access arbitrary heap memory. Due to an error in th...
CVE-2005-0202
Removed by vendor...
CVE-2005-0202
Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...
CVE-2004-2590
Unspecified vulnerability in meindlSOFT Cute PHP Library aka cphplib 0.46 has unknown impact and attack vectors, related to regular expressions...
FreeIPS 1.0 Protected Service - Denial of Service
FreeIPS 1.0 Protected Service - Denial of Service / source: https://www.securityfocus.com/bid/10541/info It is reported that FreeIPS is susceptible to a denial of service vulnerability. FreeIPS scans TCP connections for particular strings, defined by regular expressions. If a packet matches the...
Apache local buffer overflow
Buffer overflow on parsing regular expressions in .htaccess...
CVE-2002-0233
Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request...
CVE-2002-0233
The CVE-2002-0233 entry concerns the eshare Expressions 4 Web server. The vulnerability is a directory traversal flaw that allows an attacker to read arbitrary files by using a .. (dot dot) in an HTTP request. Affected component: the web server’s request handling. Underlying cause: improper valid...
CVE-2002-0233
Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request...
Viewing arbitrary file from the file system using Eshare Expressions 4 server
There is a bug in Expressions server where you can view any file on the drive that the server is installed on by using simple ../../ Example: If eshare server Is installed at: C:eshareexpressions And lets say this is an NT4.0 machine with os installed in c:winnt It is possible to pull win.ini fil...
ОБратный путь в директориях Eshare Expressions (directory traversal)
No description provided...
Apache web server performs case sensitive filtering on Mac OS X HFS+ case insensitive filesystem
Overview The Apache 1.3.14 web server's file access protection scheme can be bypassed for the Mac OS X HFS+ filesystem. Description The Apache web server's file access protection scheme i.e., file request "filtering" assumes that the filesystem being protected is case sensitve. For example, in a...