473 matches found
Gentoo Security Advisory GLSA 200410-10 (gettext)
The remote host is missing updates announced in advisory GLSA 200410-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
sitexscms-traverserfi.txt
siteXS CMS 0.1.1 Directory Traversal Vulnerability,Arbitrary File Upload,Remote File Include Discovered by: e.wiZz! Site: madspot.org Mail: N/A :D Info: Thanks to ourBosnian presidentswe have 3,eh for stealing our money,so we dont have anythin' to eat. cheers In the wild....... / INTRO / Info:...
CVE-2007-6039
PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in 1 the domain parameter to the dgettext function, the message parameter to the 2 dcgettext or 3 gettext function, the msgid1 parameter to the 4 dngettext or 5 ngettext...
CVE-2007-6039: Improper Input Validation
PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in 1 the domain parameter to the dgettext function, the message parameter to the 2 dcgettext or 3 gettext function, the msgid1 parameter to the 4 dngettext or 5 ngettext...
PHP <= 5.2.5 Gettext Lib Multiple Denial of service
PHP是一款流行的网络编程语言。 PHP多个GetText函数存在输入检查错误，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以应用程序进程权限执行任意指令。 问题是PHP dgettext,dcgettext,dngettext,gettext,ngettext,dcgettext函数对参数缺少正确边界检查错误，恶意的WEB页，可导致以PHP进程权限执行任意指令。 PHP 5.2.5 目前没有解决方案提供： http://www.php.net/ root@unsafebox:/ uname -a Linux unsafebox 2.6.20-16-generic 2 SMP Sun...
PHP <= 5.2.5 Gettext Lib Multiple Denial of service
Application: PHP = 5.2.5 Web Site: http://php.net Platform: Unix Bug: Multiple Denial of service fonction: Gettext Lib multiple Denial of service special condition: Default php-memory-limit Tested on : Debian 4.0 , Ubuntu , Freebsd with Suhosin 0.9.6.2...
PHP multiple denial of service conditions
DoS in streamwrapperregister, dgettext, dcgettext, dngettext, gettext, ngettext, dcgettext functions...
PHP 5.2.5 - Multiple GetText functions Denial of Service Vulnerabilities
PHP 5.2.5 - Multiple GetText functions Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/26428/info PHP is prone to multiple denial-of-service vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues ...
PHP 5.2.5 - Multiple GetText functions Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/26428/info PHP is prone to multiple denial-of-service vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues to cause denial-of-service conditions. Given the nature of these issues,...
Ubuntu 6.06 LTS / 6.10 / 7.04 : elinks vulnerability (USN-457-1)
Arnaud Giersch discovered that elinks incorrectly attempted to load gettext catalogs from a relative path. If a user were tricked into running elinks from a specific directory, a local attacker could execute code with user privileges. Note that Tenable Network Security has extracted the preceding...
LimeSurvey 1.52 - language.php Remote File Inclusion
LimeSurvey 1.52 - language.php Remote File Inclusion \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : LimeSurvey PHPSurveyor 1.52 plusbuild 2007.10.16 Download :...
[SECURITY] Fedora 7 Update: po4a-0.32-4.fc7
The po4a po for anything project goal is to ease translations and more interestingly, the maintenance of translations using gettext tools on areas where they were not expected like documentation...
USN-457-1: elinks vulnerability
Arnaud Giersch discovered that elinks incorrectly attempted to load gettext catalogs from a relative path. If a user were tricked into running elinks from a specific directory, a local attacker could execute code with user privileges...
DEBIAN-CVE-2007-2027
Untrusted search path vulnerability in the addfilenametostring function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog .po file in a "../po" directory, which can be leveraged to conduct format string attacks...
CVE-2007-2027
Untrusted search path vulnerability in the addfilenametostring function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog .po file in a "../po" directory, which can be leveraged to conduct format string attacks...
CVE-2007-2027: Use of Externally-Controlled Format String
Untrusted search path vulnerability in the addfilenametostring function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog .po file in a "../po" directory, which can be leveraged to conduct format string attacks...
[ MDKSA-2006:051 ] - Updated gettext packages fix temporary file vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:051 http://www.mandriva.com/security/ Package : gettext Date : February 28, 2006 Affected: Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The Trustix developers discovered temporary file...
Ubuntu 4.10 : gettext vulnerabilities (USN-5-1)
Recently, Trustix Secure Linux discovered some vulnerabilities in the gettext package. The programs 'autopoint' and 'gettextize' created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...
