767 matches found
CVE-2008-2050
Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...
Stack overflow
Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...
CVE-2008-2050
Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...
CVE-2008-2050
CVE-2008-2050 affects PHP before 5.2.6, with a stack-based buffer overflow in the FastCGI SAPI (fastcgi.c). Connected sources corroborate the vulnerability and note that updates (e.g., openSUSE/SUSE php5 patches) fix this issue. No exploit details are provided in the documents. Mitigation: apply ...
PT-2008-3567 · Php · Php
Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.2.6 Description: A stack-based buffer overflow issue exists in the FastCGI SAPI fastcgi.c of PHP, with unknown impact and attack vectors. Recommendations: For versions prior to 5.2.6, update to version 5.2.6 or later t...
CVE-2008-2050: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the FastCGI SAPI fastcgi.c in PHP before 5.2.6 has unknown impact and attack vectors...
[SECURITY] Fedora 8 Update: lighttpd-1.4.19-4.fc8
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
[SECURITY] Fedora 8 Update: lighttpd-1.4.18-6.fc8
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-3.fc7
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
Lighttpd 1.4.17 - FastCGI Header Overflow Arbitrary Code Execution
/ hoagielighttpd.c LIGHTTPD/FASTCGI REMOTE EXPLOIT Philip Olausson http://www.secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ FastCGI: http://www.fastcgi.com/devkit/doc/fcgi-spec.html THIS FILE IS FOR STUDYING PURPOSES ONLY AND A PROOF-OF- CONCEPT. THE AUTHOR CAN NOT BE HELD...
Lighttpd <= 1.4.17 FastCGI Header Overflow Remote Exploit
No description provided by source. / hoagielighttpd.c LIGHTTPD/FASTCGI REMOTE EXPLOIT = 1.4.17 Bug discovered by: Mattias Bengtsson [email protected] Philip Olausson [email protected] http://www.secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ FastCGI:...
Lighttpd 1.4.17 - FastCGI Header Overflow Arbitrary Code Execution
Lighttpd 1.4.17 - FastCGI Header Overflow Arbitrary Code Execution / hoagielighttpd.c LIGHTTPD/FASTCGI REMOTE EXPLOIT Philip Olausson http://www.secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ FastCGI: http://www.fastcgi.com/devkit/doc/fcgi-spec.html THIS FILE IS FOR STUDYING...
Lighttpd <= 1.4.17 FastCGI Header Overflow Remote Exploit
Exploit for linux platform in category remote exploits ========================================================= Lighttpd Philip Olausson http://www.secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ FastCGI: http://www.fastcgi.com/devkit/doc/fcgi-spec.html THIS FILE IS FOR STUDYING...
lighttpd mod_fastcgi HTTP Request Header Remote Overflow
The remote web server appears to be lighttpd running with the FastCGI module modfastcgi. The version of the FastCGI module on the remote host is affected by a buffer overflow vulnerability. A remote attacker can exploit this, by sending a specially crafted request with a long header, to add or...
FreeBSD : lighttpd -- FastCGI header overrun in mod_fastcgi (4b673ae7-5f9a-11dc-84dd-000102cc8983)
lighttpd maintainer reports : Lighttpd is prone to a header overflow when using the modfastcgi extension, this can lead to arbitrary code execution in the fastcgi application. For a detailed description of the bug see the external reference. This bug was found by Mattias Bengtsson and Philip...
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-1.fc7
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
Lighttpd 1.4.16 - FastCGI Header Overflow Remote Command Execution
/ Remote Lighttpd + FastCGI + PHP example exploit Tested with Lighttpd 1.4.16 and PHP 5.2.4 To avoid abuse there's a "remove me" in the code. Example: ./exploit localhost 80 /etc/passwd or wget --referer="" localhost ./exploit localhost 80 /var/log/lighttpd/access.log Mattias Bengtsson...
Lighttpd <= 1.4.16 FastCGI Header Overflow Remote Exploit
Exploit for multiple platform in category remote exploits ========================================================= Lighttpd " localhost ./exploit localhost 80 /var/log/lighttpd/access.log Mattias Bengtsson http://www.secweb.se/ / include include include include include include include include...
Lighttpd <= 1.4.16 FastCGI Header Overflow Remote Exploit
No description provided by source. / Remote Lighttpd + FastCGI + PHP example exploit Tested with Lighttpd 1.4.16 and PHP 5.2.4 To avoid abuse there's a "remove me" in the code. Example: ./exploit localhost 80 /etc/passwd or wget --referer="?php system'/usr/bin/id'; ?" localhost ./exploit localhos...
Lighttpd 1.4.16 - FastCGI Header Overflow Remote Command Execution
Lighttpd 1.4.16 - FastCGI Header Overflow Remote Command Execution / Remote Lighttpd + FastCGI + PHP example exploit Tested with Lighttpd 1.4.16 and PHP 5.2.4 To avoid abuse there's a "remove me" in the code. Example: ./exploit localhost 80 /etc/passwd or wget --referer="" localhost ./exploit...