789 matches found
PHP 5.2.6修复多个安全漏洞
BUGTRAQ ID: 29009 CVECAN ID: CVE-2008-0599 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的5.2.6之前版本存在多个安全漏洞，允许恶意用户绕过安全限制、导致拒绝服务或入侵有漏洞的系统。 1 FastCGI SAPI中的安全漏洞可能导致栈溢出。 2 处理escapeshellcmd中不完整多字节字符时存在安全漏洞。 3 cURL中的错误可能导致绕过safemode限制。 4 PCRE中的边界条件错误可能允许恶意用户导致拒绝服务或入侵有漏洞的系统。 PHP 5.2.6 PHP ---...
Stack overflow
Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...
CVE-2008-2050
Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...
CVE-2008-2050
Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...
CVE-2008-2050
Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...
CVE-2008-2050
CVE-2008-2050 affects PHP before 5.2.6, with a stack-based buffer overflow in the FastCGI SAPI (fastcgi.c). Connected sources corroborate the vulnerability and note that updates (e.g., openSUSE/SUSE php5 patches) fix this issue. No exploit details are provided in the documents. Mitigation: apply ...
PT-2008-3567 · Php · Php
Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.2.6 Description: A stack-based buffer overflow issue exists in the FastCGI SAPI fastcgi.c of PHP, with unknown impact and attack vectors. Recommendations: For versions prior to 5.2.6, update to version 5.2.6 or later t...
CVE-2008-2050: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...
[SECURITY] Fedora 8 Update: lighttpd-1.4.19-4.fc8
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
[SECURITY] Fedora 8 Update: lighttpd-1.4.18-6.fc8
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-3.fc7
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
Lighttpd <= 1.4.17 FastCGI Header Overflow Remote Exploit
No description provided by source. / hoagielighttpd.c LIGHTTPD/FASTCGI REMOTE EXPLOIT = 1.4.17 Bug discovered by: Mattias Bengtsson [email protected] Philip Olausson [email protected] http://www.secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ FastCGI:...
Lighttpd 1.4.17 - FastCGI Header Overflow Arbitrary Code Execution
Lighttpd 1.4.17 - FastCGI Header Overflow Arbitrary Code Execution / hoagielighttpd.c LIGHTTPD/FASTCGI REMOTE EXPLOIT Philip Olausson http://www.secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ FastCGI: http://www.fastcgi.com/devkit/doc/fcgi-spec.html THIS FILE IS FOR STUDYING...
Lighttpd <= 1.4.17 FastCGI Header Overflow Remote Exploit
Exploit for linux platform in category remote exploits ========================================================= Lighttpd Philip Olausson http://www.secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ FastCGI: http://www.fastcgi.com/devkit/doc/fcgi-spec.html THIS FILE IS FOR STUDYING...
Lighttpd 1.4.17 - FastCGI Header Overflow Arbitrary Code Execution
/ hoagielighttpd.c LIGHTTPD/FASTCGI REMOTE EXPLOIT Philip Olausson http://www.secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ FastCGI: http://www.fastcgi.com/devkit/doc/fcgi-spec.html THIS FILE IS FOR STUDYING PURPOSES ONLY AND A PROOF-OF- CONCEPT. THE AUTHOR CAN NOT BE HELD...
lighttpd mod_fastcgi HTTP Request Header Remote Overflow
The remote web server appears to be lighttpd running with the FastCGI module modfastcgi. The version of the FastCGI module on the remote host is affected by a buffer overflow vulnerability. A remote attacker can exploit this, by sending a specially crafted request with a long header, to add or...
FreeBSD : lighttpd -- FastCGI header overrun in mod_fastcgi (4b673ae7-5f9a-11dc-84dd-000102cc8983)
lighttpd maintainer reports : Lighttpd is prone to a header overflow when using the modfastcgi extension, this can lead to arbitrary code execution in the fastcgi application. For a detailed description of the bug see the external reference. This bug was found by Mattias Bengtsson and Philip...
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-1.fc7
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
Lighttpd <= 1.4.16 FastCGI Header Overflow Remote Exploit
Exploit for multiple platform in category remote exploits ========================================================= Lighttpd " localhost ./exploit localhost 80 /var/log/lighttpd/access.log Mattias Bengtsson http://www.secweb.se/ / include include include include include include include include...
Lighttpd <= 1.4.16 FastCGI Header Overflow Remote Exploit
No description provided by source. / Remote Lighttpd + FastCGI + PHP example exploit Tested with Lighttpd 1.4.16 and PHP 5.2.4 To avoid abuse there's a "remove me" in the code. Example: ./exploit localhost 80 /etc/passwd or wget --referer="?php system'/usr/bin/id'; ?" localhost ./exploit localhos...