8589 matches found
CVE-2006-0200
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages...
CVE-2006-0200
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages...
CVE-2006-0200
The CVE-2006-0200 issue is a format-string vulnerability in PHP’s mysqli extension error-reporting for PHP versions 5.1.0 and 5.1.1, potentially leading to remote code execution via crafted MySQL error messages. Public references (NVD, SUSE, OpenVAS, Tenable/Nessus) confirm the affected component...
Multiple PHP extensions vulnerabilities
mysqli extension format string vulnerability, session extension session id HTTP response splitting...
Advisory 02/2006: PHP ext/mysqli Format String Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PHP ext/mysqli Format String Vulnerability Release Date: 2006/01/12 Last Modified: 2006/01/12 Author: Stefan Esser [email protected] Application: PHP5.1 = 5.1.1 Not...
Format string
Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the quote command. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue th...
CVE-2006-0178
Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the quote command. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue th...
CVE-2006-0178
Technical details (affected product versions, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendor notices.
CVE-2006-0178
Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the quote command. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue th...
RHEL 2.1 : auth_ldap (RHSA-2006:0179)
An updated authldap packages that fixes a format string security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The authldap package is an httpd module that allows user authentication...
Critical: Red Hat Security Advisory: auth_ldap security update
An updated authldap packages that fixes a format string security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The authldap package is an httpd module that allows user authentication...
[SECURITY] [DSA 935-1] New libapache2-mod-auth-pgsql packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 935-1 [email protected] http://www.debian.org/security/ Michael Stone January 10, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 935-1] New libapache2-mod-auth-pgsql packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 935-1 [email protected] http://www.debian.org/security/ Michael Stone January 10, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 930-2] New smstools packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 930-2 [email protected] http://www.debian.org/security/ Steve Kemp January 10, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 930-2] New smstools packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 930-2 [email protected] http://www.debian.org/security/ Steve Kemp January 10, 2006 http://www.debian.org/security/faq -...
Apache auth_ldap authentication module format string vulnerabilities
Format string vulnerability on error logging...
DSA-930-2 smstools - format string attack
Bulletin has no description...
Apache mod-auth-pgsql authorization module format string vulnerabilities
Several format string bugs in error logging...
mod_auth_pgsql: Multiple format string vulnerabilities
Background modauthpgsql is an Apache2 module that allows user authentication against a PostgreSQL database. Description The error logging functions of modauthpgsql fail to validate certain strings before passing them to syslog, resulting in format string vulnerabilities. Impact An unauthenticated...