Perl Unicode “\Q...\E”正则表达式缓冲区溢出漏洞

BUGTRAQ ID: 28928 CVECAN ID: CVE-2008-1927 Perl是一种免费且功能强大的编程语言。 Perl在处理畸形的正则表达式时存在漏洞，如果用户所提供的正则表达式字符包含在“\Q...\E”结构所保护的变量中的话，则Perl解释器在编译正则表达式时可能会出现缓冲区溢出，导致拒绝服务的情况。 Larry Wall Perl 5.8.8 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1556-1）以及相应补丁: DSA-1556-1：New perl packages fix denial of service...

Debian DSA-212-1 : mysql - multiple problems

While performing an audit of MySQL e-matters found several problems : signed/unsigned problem in COMTABLEDUMP Two sizes were taken as signed integers from a request and then cast to unsigned integers without checking for negative numbers. Since the resulting numbers where used for a memcpy...

[SECURITY] [DSA 421-1] New mod-auth-shadow packages fix password expiration checking

-------------------------------------------------------------------------- Debian Security Advisory DSA 421-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 12th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 292-3] New mime-support packages really fix temporary file race conditions

-------------------------------------------------------------------------- Debian Security Advisory DSA 292-3 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-262-1] samba security fix

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-262-1 [email protected] http://www.debian.org/security/ Wichert Akkerman March 15, 2003 -...

[SECURITY] [DSA-257-1] sendmail remote exploit

------------------------------------------------------------------------ Debian Security Advisory DSA-257-1 [email protected] http://www.debian.org/security/ Wichert Akkerman March 4, 2003 - ------------------------------------------------------------------------ Package : sendmail Problem type...

[SECURITY] [DSA-209-1] two wget problems

------------------------------------------------------------------------ Debian Security Advisory DSA-209-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 12, 2002 - ------------------------------------------------------------------------ Package : wget Problem type...

[SECURITY] [DSA 159-1] New Python packages fix insecure temporary file use

-------------------------------------------------------------------------- Debian Security Advisory DSA 159-1 [email protected] http://www.debian.org/security/ Martin Schulze August 28th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 121-1] New xtell packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 121-1 [email protected] http://www.debian.org/security/ Martin Schulze March 11th, 2002 - -------------------------------------------------------------------------- Package : xtell...

[SECURITY] [DSA 115-1] New PHP packages fix security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 115-1 [email protected] http://www.debian.org/security/ Martin Schulze March 2nd, 2002 - -------------------------------------------------------------------------- Package : php3, php4...

[SECURITY] [DSA-072-1] groff printf format problem

Package : groff Problem type : printf format attack Debian-specific: no Zenith Parse found a security problem in groff the GNU version of troff. The pic command was vulnerable to a printf format attack which made it possible to circumvent the -S option and execute arbitrary code. This has been...

[SECURITY] [DSA-002-1] fsh symlink attack

Package : fsh Problem type : symlink attack Debian-specific: no Colin Phipps found an interesting symlink attack problem in fsh a tool to quickly run remote commands over rsh/ssh/lsh. When fshd starts it creates a directory in /tmp to hold its sockets. It tries to do that securely by checking of ...

[SECURITY] glibc update for Debian GNU/Linux 2.1 (update)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman September 5, 2000 - ------------------------------------------------------------------------ Package: glibc Vulnerability: local...