7310 matches found
PT-2016-3297 · Gnu +3 · Gnu Tar +3
Name of the Vulnerable Software and Affected Versions: GNU tar versions 1.14 through 1.29 Description: The issue is related to a directory traversal vulnerability in the safer name suffix function. This vulnerability might allow remote attackers to bypass an intended protection mechanism and writ...
Oracle: Security Advisory (ELSA-2010-0141)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2010-0505)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GNU Tar and libarchive Out-of-Bounds Memory Corruption Vulnerability
GNU Tar is a set of tools for creating tar-formatted files; libarchive is a multi-format archive and compression library. A memory corruption vulnerability exists in GNU Tar and libarchive, which can be exploited by a remote attacker to crash an application by submitting a specific request...
PHP Multiple Function Stack Buffer Overflow (CVE-2015-3329; CVE-2016-10159)
A buffer overflow vulnerability exists in PHP. The vulnerability is due to improper bounds checking when handling .tar, .phar or .zip archives in the pharsetinode function or pharparsepharfile function. A remote attacker can exploit this vulnerability by providing a crafted .tar or .phar file to ...
PT-2015-3238
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.43 PHP versions 5.5.x prior to 5.5.27 PHP versions 5.6.x prior to 5.6.11 Description The issue exists due to a lack of validation of a file pointer before it is closed in the phar convert to other function. This can b...
CVE-2015-5589
The pharconverttoother function in ext/phar/pharobject.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other...
PHP phar_parse_tarfile method Integer Overflow (CVE-2015-4021)
An integer overflow vulnerability exists in PHP. The vulnerability is due to an issue with the parsing of TAR files by pharparsetarfile. A remote attacker can exploit the vulnerability by sending crafted data to a web application running a vulnerable version of PHP. Successful exploitation could...
UBUNTU-CVE-2015-5589
The pharconverttoother function in ext/phar/pharobject.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other...
Cisco NX-OS 'tar' Command Checksum Privilege Elevation Vulnerability
Cisco NX-OS software is a data center-class operating system that embodies modular design, sustainability, and maintainability. Cisco NX-OS has a security vulnerability that allows a local user to execute arbitrary system commands through the command interpreter by submitting special parameter...
php: memory corruption in phar_parse_tarfile caused by empty entry file name
An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...
Ubuntu 14.04 LTS : PHP vulnerabilities (USN-2658-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2658-1 advisory. Neal Poole and Tomas Hoger discovered that PHP incorrectly handled NULL bytes in file paths. A remote attacker could possibly use this issue to bypass...
Design/Logic Flaw
Cisco NX-OS 6.210 on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856...
CVE-2015-4232
Cisco NX-OS 6.210 on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856...
CVE-2015-4232: Undefined Security Weakness
Cisco NX-OS 6.210 on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856...
Cisco Nexus Device NS-OS Software Command Line Interpreter Local Elevation of Privilege Vulnerability
Nexus is Cisco's line of network switches designed for data centers. Multiple elevation of privilege vulnerabilities exist in the command line interpreter of Cisco Nexus devices with invalid parameter input filtering for the tar command, which can be exploited by an authenticated, local attacker ...
Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation Vulnerability
A local privilege escalation vulnerability in the command-line interpreter of Cisco Nexus devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with user privileges. The vulnerability exists due to insufficient input sanitization of...
PT-2015-2236
Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.210 Description The issue is related to insufficient access control to files in the network operating system, allowing a local attacker to execute arbitrary OS commands by passing special parameters. This is due to...
Google Android Operating System < 4.3.0 Multiple Vulnerabilities
Binary data 8781.prm...
php: memory corruption in phar_parse_tarfile caused by empty entry file name
An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...