PHP 4.x < 4.4.9 Multiple Vulnerabilities

Binary data 4620.prm...

PHP < 4.4.9 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 4.4.9. Such versions may be affected by several security issues : - There are unspecified issues in the bundled PCRE library fixed by version 7.7. - A buffer overflow in the 'imageloadfont' function in...

[slackware-security] pcre

New pcre packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2371 Here are the details from the Slackware 12.1 ChangeLog:...

Slackware 12.0 / 12.1 / current : pcre (SSA:2008-210-09)

New pcre packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-210-09. The text itself is copyright C...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : php5 vulnerabilities (USN-628-1)

It was discovered that PHP did not properly check the length of the string parameter to the fnmatch function. An attacker could cause a denial of service in the PHP interpreter if a script passed untrusted input to the fnmatch function. CVE-2007-4782 Maksymilian Arciemowicz discovered a flaw in t...

USN-628-1: PHP vulnerabilities

It was discovered that PHP did not properly check the length of the string parameter to the fnmatch function. An attacker could cause a denial of service in the PHP interpreter if a script passed untrusted input to the fnmatch function. CVE-2007-4782 Maksymilian Arciemowicz discovered a flaw in t...

php security update

CentOS Errata and Security Advisory CESA-2008:0546-01 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

[ MDVSA-2008:147 ] - Updated pcre packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:147 http://www.mandriva.com/security/ Package : pcre Date : July 15, 2008 Affected: 2007.1, 2008.0, 2008.1 Problem Description: Tavis Ormandy of the Google Security Team discovered a heap-based buffer overfl...

Moderate: Red Hat Security Advisory: php security update

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. ...

RHEL 2.1 : php (RHSA-2008:0546)

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. ...

USN-624-1: PCRE vulnerability

Tavis Ormandy discovered that the PCRE library did not correctly handle certain in-pattern options. An attacker could cause applications linked against pcre3 to crash, leading to a denial of service...

Debian Security Advisory DSA 1602-1 (pcre3)

The remote host is missing an update to pcre3 announced via advisory DSA 1602-1. OpenVAS Vulnerability Test $Id: deb16021.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1602-1 pcre3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

GLSA-200807-03 : PCRE: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200807-03 PCRE: Buffer overflow Tavis Ormandy of the Google Security team reported a heap-based buffer overflow when compiling regular expression patterns containing 'Internal Option Settings' such as '?i'. Impact : A remote...

openSUSE 10 Security Update : pcre (pcre-5366)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code CVE-2008-2371. %NASLMINLEVEL 70300 C Tenable...

PCRE 规则表达式堆缓冲区溢出漏洞

BUGTRAQ ID: 30087 CVE ID：CVE-2008-2371 CNCVE ID：CNCVE-20082371 PCREPerl兼容正则表达式库是一款开放源代码的软件，可提供正则表达式支持。 PCRE pcrecompile.c文件存在堆溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当PCRE在启动模式下指定选项时，为了避免将其不需要编译到字节代码，如通过pcrecompile选项指定的方式传送回调用程序如/?ia|b/ ==...

Fedora 9 : glib2-2.16.4-1.fc9 (2008-6048)

From the release announcement: Update to PCRE 7.7 - fix a heap-based buffer overflow in PCRE CVE-2008-2371 Bug fixes: 528752 Win32 build and SSL not working 539074 Cannot get exit status with gspawncommandlinesync 316221 GLOCK warns about breaking strict-aliasing rules 519137 gslicedup macro need...

Fedora 9 : pcre-7.3-4.fc9 (2008-6110)

Fri Jul 4 2008 Tomas Hoger - 7.3-4 - Apply Tavis Ormandy's patch for CVE-2008-2371. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 8 : pcre-7.3-4.fc8 (2008-6111)

Fri Jul 4 2008 Tomas Hoger - 7.3-4 - Apply Tavis Ormandy's patch for CVE-2008-2371. - Tue Feb 12 2008 Tomas Hoger - 7.3-3 - Backport patch from upstream pcre 7.6 to address buffer overflow caused by 'a character class containing a very large number of characters with codepoints greater than 255...

Heap overflow

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...