FreeBSD : PHP5 -- memory corruption in openssl_x509_parse() (47b4e713-6513-11e3-868f-0025905a4771)

Stefan Esser reports : The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes...

PHP openssl_x509_parse() Memory Corruption

SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PHP opensslx509parse Memory Corruption Vulnerability Release Date: 2013/12/13 Last Modified: 2013/12/13 Author: Stefan Esser stefan.esseratsektioneins.de Application: PHP 4.0.6 - PHP 4.4.9 PHP 5.0.x PHP 5.1.x PHP 5.2.x PHP 5.3....

CVE-2013-4988

creationtimestamp| type| source ---|---|--- 2013-12-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30208 2014-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30788 2018-05-29 15:50:33+00:00| seen|...

CVE-2013-5065

creationtimestamp| type| source ---|---|--- 2013-12-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30014 2013-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30392 2018-05-29 15:50:33+00:00| seen|...

CVE-2013-7390

creationtimestamp| type| source ---|---|--- 2013-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29812 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/desktopcentralfileupload.rb 2020-01-27...

CVE-2013-4467

creationtimestamp| type| source ---|---|--- 2013-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29513 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/vicidialmanagersendcmdexec.rb 2025-02-06...

CVE-2013-6935

creationtimestamp| type| source ---|---|--- 2013-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29327 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/watermarkmaster.rb 2025-02-06 03:13:41+00:00|...

CVE-2013-3628

creationtimestamp| type| source ---|---|--- 2013-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29321 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/zabbixscriptexec.rb 2025-02-06 03:13:41+00:00| seen|...

CVE-2013-6129

creationtimestamp| type| source ---|---|--- 2013-10-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38785 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/vbulletinupgradeadmin.rb 2025-02-06 03:13:41+00:00|...

CVE-2013-4660

creationtimestamp| type| source ---|---|--- 2013-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28655 2017-10-24 18:33:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xxvw-45rp-3mj2 2018-05-29 15:50:33+00:00| seen|...

CVE-2013-4011

creationtimestamp| type| source ---|---|--- 2013-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28507 2014-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32700 2018-05-29 15:50:33+00:00| seen|...

CVE-2013-3568

creationtimestamp| type| source ---|---|--- 2013-09-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28484 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksyswrt110cmdexec.rb 2020-01-08 13:22:45+00:00|...

CVE-2013-0810

creationtimestamp| type| source ---|---|--- 2013-09-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28482 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms13071theme.rb 2025-02-06 03:13:41+00:00|...

CVE-2013-4812

creationtimestamp| type| source ---|---|--- 2013-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28337 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hppcmsnacupdatecertificates.rb 2025-02-06...

CVE-2013-3163

creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms13055canchor.rb 2023-06-14 21:10:03+00:00| see...

CVE-2006-2492

creationtimestamp| type| source ---|---|--- 2013-09-09 12:51:06+00:00| seen| MISP/522dbc07-2e20-4aaf-8936-39d4ac1d4fa4 2023-06-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:59+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971623 2025-02-23...

CVE-2013-1775

creationtimestamp| type| source ---|---|--- 2013-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27944 2013-08-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27965 2018-05-29 15:50:33+00:00| seen|...

CVE-2013-0753

creationtimestamp| type| source ---|---|--- 2013-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27940 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozillafirefoxxmlserializer.rb 2025-02-06...

CVE-2013-3763

creationtimestamp| type| source ---|---|--- 2013-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27877 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oracleendecaexec.rb 2025-02-06 03:13:41+00:00| seen...

CVE-2013-0641

creationtimestamp| type| source ---|---|--- 2013-08-22 14:54:38+00:00| seen| MISP/521625ab-fa68-431c-bfab-6a83ac1d4fa4 2020-10-09 17:20:16+00:00| seen| MISP/d765ce80-c55a-4fd6-8a7e-242cca159458 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 01:37:16+00:00|...