PHP str_transliterate()函数Unicode字符远程溢出漏洞

BUGTRAQ ID: 39185 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 远程攻击者可以通过向PHP的strtransliterate函数提交超长的Unicode字符串请求触发缓冲区溢出，导致执行任意代码。成功利用这个漏洞要求配置中打开了unicode.semantics。 PHP 6.0 dev 厂商补丁： PHP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.php.net view sourceprint??php errorreporting0; PHP 6....

RedHat Update for brltty RHSA-2010:0181-05

Check for the Version of brltty OpenVAS Vulnerability Test RedHat Update for brltty RHSA-2010:0181-05 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

PHP 6.0 Dev str_transliterate() Buffer Overflow

Exploit Title: PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit Date: 2010-04-04 Author: Pr0T3cT10n Software Link: http://downloads.sourceforge.net/project/wampserver/WampServer%202%20-%20Extensions/PHP/WampServer2-PHP6.0dev.exe?usemirror=garr Version: 6.0 Dev Tested on: WIN XP HEB SP3...

PHP 6.0 Dev - str_transliterate() Local Buffer Overflow

PHP 6.0 Dev - strtransliterate Local Buffer Overflow Exploited by TheLeader, Debug SP. Thanks: HDM http://www.nullbyte.org.il This code should exploits a buffer overflow in the strtransliterate function to call WinExec and execute CALC Take a look, 'unicode.semantics' has to be on! php.ini...

PHP 6.0 Dev str_transliterate() 0Day Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ============================================================ PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit ============================================================ Exploited by TheLeader, Debug SP. Thanks: HDM...

Low: Red Hat Security Advisory: brltty security and bug fix update

Updated brltty packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

USN-914-1: Linux kernel vulnerabilities

Mathias Krause discovered that the Linux kernel did not correctly handle missing ELF interpreters. A local attacker could exploit this to cause the system to crash, leading to a denial of service. CVE-2010-0307 Marcelo Tosatti discovered that the Linux kernel's hardware virtualization did not...

Remote file inclusion

PHP remote file inclusion vulnerability in inc/config.php in deV!Lz Clanportal DZCP 1.5.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...

CVE-2010-0966

PHP remote file inclusion vulnerability in inc/config.php in deV!Lz Clanportal DZCP 1.5.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...

CVE-2010-0966

CVE-2010-0966 affects the PHP-based DZCP/deV!L`z Clanportal 1.5.2. The vulnerability is a PHP remote file inclusion in inc/config.php when register_globals is enabled, allowing an attacker to cause arbitrary PHP code execution by supplying a crafted URL for the basePath parameter. The CVE Descrip...

deV!L`z Clanportal 1.5.2 Remote File Include Vulnerability

Exploit for unknown platform in category web applications ========================================================== deV!Lz Clanportal 1.5.2 Remote File Include Vulnerability ========================================================== + deV!Lz Clanportal 1.5.2 Remote File Include Vulnerability...

DZCP (deV!L_z Clanportal) 1.5.2 - Remote File Inclusion

DZCP deV!Lz Clanportal 1.5.2 - Remote File Inclusion + deV!Lz Clanportal 1.5.2 Remote File Include Vulnerability + Discovered By: cr4wl3r + Download: http://www.dzcp.de/downloads/?action=download&id=131 x Code in dzcp1.5.2/inc/config.php REQUIRES requireonce$basePath."/inc/mysql.php"; $code $tpl ...

Apache mod_isapi module library unload results in orphaned callback pointers

Overview The Apache modisapi module can be forced to unload a specific library before the processing of a request is complete, resulting in memory corruption. This vulnerability may allow a remote attacker to execute arbitrary code. Description The Apache HTTP server running on Windows platforms...

AZL-34841 CVE-2010-0309 affecting package kernel for versions less than 6.6.35.1-4

The pitioportread function in the Programmable Interval Timer PIT emulation in i8254.c in KVM 83 does not properly use the pitstate data structure, which allows guest OS users to cause a denial of service host OS crash or hang by attempting to read the /dev/port file...

Design/Logic Flaw

The pitioportread function in the Programmable Interval Timer PIT emulation in i8254.c in KVM 83 does not properly use the pitstate data structure, which allows guest OS users to cause a denial of service host OS crash or hang by attempting to read the /dev/port file...

AZL-6509 CVE-2010-0309 affecting package kernel for versions less than 5.10.78.1-1

The pitioportread function in the Programmable Interval Timer PIT emulation in i8254.c in KVM 83 does not properly use the pitstate data structure, which allows guest OS users to cause a denial of service host OS crash or hang by attempting to read the /dev/port file...

CVE-2010-0309

The pitioportread function in the Programmable Interval Timer PIT emulation in i8254.c in KVM 83 does not properly use the pitstate data structure, which allows guest OS users to cause a denial of service host OS crash or hang by attempting to read the /dev/port file...

PT-2010-2100 · Linux +1 · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM version 83 Description: The issue arises from the pit ioport read function in the Programmable Interval Timer PIT emulation, specifically in the i8254.c file. This function does not properly utilize the pit state data structure, allowing...

Ubuntu Update for samba vulnerability USN-893-1

Ubuntu Update for Linux kernel vulnerabilities USN-893-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8931.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for samba vulnerability USN-893-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

linux/x86 overwrite MBR on /dev/sda with `LOL!` 43 bytes

Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 overwrite MBR on /dev/sda with LOL! 43 bytes ======================================================== ; linux/x86 overwrite MBR on /dev/sda with LOL! 43 bytes section .text glob...