CVE-2009-3557

The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safemode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments...

CVE-2009-3558: Undefined Security Weakness

The posixmkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass openbasedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file...

CVE-2009-3557: Undefined Security Weakness

The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safemode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments...

openSUSE Security Update : kernel (kernel-270)

This patch updates the openSUSE 11.0 kernel to the 2.6.25.18 stable release. It also includes bugfixes and security fixes : CVE-2008-4410: The vmiwriteldtentry function in arch/x86/kernel/vmi32.c in the Virtual Machine Interface VMI in the Linux kernel 2.6.26.5 invokes writeidtentry where...

Almnzm (COOKIE: customer) Remote SQL Injection Vulnerability

No description provided by source. ? printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ ---Script Almnzm SQL INJECTION /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ ---"Powered by Almnzm" /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ ---admin cookie create |QQQQ/ By Qabandi \QQQQ| ---Add PhP Ext |QQQQ| |QQQQ|...

eggBlog <= 4.1.1 Local Directory Transversal Exploit

Exploit for unknown platform in category web applications ==================================================== eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imageli...

Debian Security Advisory DSA 1775-1 (php-json-ext)

The remote host is missing an update to php-json-ext announced via advisory DSA 1775-1. OpenVAS Vulnerability Test $Id: deb17751.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1775-1 php-json-ext Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Debian: Security Advisory (DSA-1775-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1775-1 : php-json-ext - denial of service

It was discovered that php-json-ext, a JSON serialiser for PHP, is prone to a denial of service attack, when receiving a malformed string via the jsondecode function. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[SECURITY] [DSA 1775-1] New php-json-ext packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1775-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 20, 2009 http://www.debian.org/security/faq -...

CVE-2009-1271: Undefined Security Weakness

The JSONparser function ext/json/JSONparser.c in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service segmentation fault via a malformed string to the jsondecode API function...

php security update

5.1.6-23.2.el5 - ext/gd: fix overflow2 usage for CVE-2007-3996, CVE-2008-3658 5.1.6-23.1.el5 - add security fixes for CVE-2008-3658, CVE-2008-3660, CVE-2008-5498, CVE-2008-5557, CVE-2008-5814, and mbstring funcoverload issue 487369...

kernel security and bug fix update

2.6.18-128.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

Media Commands Heap Overflow

!usr/bin/perl Discovered & Coded by : Hakxer Media Commands M3U,M3l,TXT,LRC Files Crash PoC Greetz : Allah , ProViDoR , Egyptian x Hacker Team : Egy coders Team Download/http://www.mediacommands.com/download.html Description : Import Hakxer.Ext Into program ... Program Get Crashed ; my...

CVE-2009-0642

ext/openssl/osslocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSPbasicverify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate...

CVE-2009-0642: Improper Authentication

ext/openssl/osslocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSPbasicverify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate...

RHEL 4 : kernel (RHSA-2008:0972)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0972 advisory. - kernel PWC driver DoS CVE-2007-5093 - kernel: dio: zero struct dio with kzalloc instead of manually CVE-2007-6716 - kernel: ptrace: Paddin...

CVE-2008-5116: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter...

CVE-2008-3658: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted font file...

AIX 530006 : U814236

The remote host is missing AIX PTF U814236 which is related to the security of the package X11.samples.ext You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...