61 matches found
Fedora 21 : php-pecl-zip-1.12.5-1.fc21 (2015-15274)
From changelog for Version 1.12.5 add OPSYSZCPM missing constant Backported from 1.13.0 Fixed bug 70350 ZipArchive::extractTo allows for directory traversal when creating directories. neal at fb dot com Note that Tenable Network Security has extracted the preceding description block directly from...
Fedora 23 : php-pecl-zip-1.13.1-1.fc23 (2015-15273)
Upstream change, Version 1.13 update bundled libzip to 1.0.1 Remi, Anatol new methods for ZipArchive: setCompressionName, setCompressionIndex Cedric Delmas allow to build with PHP 7 Fixed bug 70350 ZipArchive::extractTo allows for directory traversal when creating directories. neal at fb dot com...
Fedora 22 : php-pecl-zip-1.12.5-1.fc22 (2015-15275)
From changelog for Version 1.12.5 add OPSYSZCPM missing constant Backported from 1.13.0 Fixed bug 70350 ZipArchive::extractTo allows for directory traversal when creating directories. neal at fb dot com Note that Tenable Network Security has extracted the preceding description block directly from...
Fedora Update for php-pecl-zip FEDORA-2015-15275
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-pecl-zip FEDORA-2015-15274
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 21 Update: php-pecl-zip-1.12.5-1.fc21
Zip is an extension to create and read zip files...
[SECURITY] Fedora 22 Update: php-pecl-zip-1.12.5-1.fc22
Zip is an extension to create and read zip files...
[SECURITY] Fedora 23 Update: php-pecl-zip-1.13.1-1.fc23
Zip is an extension to create and read zip files...
PHP 5.2.0 / PHP with PECL ZIP <= 1.8.3 zip:// URL Wrapper BoF Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
Mandrake Linux Security Advisory : php (MDKSA-2007:187)
Numerous vulnerabilities were discovered in the PHP scripting language that are corrected with this update. An integer overflow in the substrcompare function allows context-dependent attackers to read sensitive memory via a large value in the length argument. This only affects PHP5 CVE-2007-1375....
CVE-2007-1460: Undefined Security Weakness
The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or openbasedir checks, which allows remote attackers to read ZIP archives located outside of the intended directories...
Stack overflow
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or...
CVE-2007-1399
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or...
CVE-2007-1399
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or...
CVE-2007-1399
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or...
CVE-2007-1399: Undefined Security Weakness
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or...
PT-2007-2793
Name of the Vulnerable Software and Affected Versions PECL ZIP versions 1.8.3 and earlier PHP versions 5.2.0 and 5.2.1 Description The issue is a stack-based buffer overflow in the zip:// URL wrapper. This allows remote attackers to execute arbitrary code via a long zip:// URL. Attackers can...
PHP 5.2.0 / PHP with PECL ZIP <= 1.8.3 zip:// URL Wrapper BoF Exploit
Exploit for linux platform in category local exploits ===================================================================== PHP 5.2.0 / PHP with PECL ZIP = 1.8.3 zip:// URL Wrapper BoF Exploit ===================================================================== ?php...
PHP 5.2.0 / PHP with PECL ZIP 1.8.3 - 'zip://' URL Wrapper Buffer Overflow
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
PHP 5.2.0 / PHP with PECL ZIP <= 1.8.3 zip:// URL Wrapper BoF Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...