FreeBSD : curl -- cURL/libcURL Location: Redirect URLs Security Bypass (5d433534-f41c-402e-ade5-e0a2259a7cb6)

Secunia reports : The security issue is caused due to cURL following HTTP Location : redirects to e.g. scp:// or file:// URLs which can be exploited by a malicious HTTP server to overwrite or disclose the content of arbitrary local files and potentially execute arbitrary commands via specially...

CURL-CVE-2009-0037 Arbitrary File Access

When told to follow a "redirect" automatically, libcurl does not question the new target URL but follows it to any new URL that it understands. As libcurl supports FILE:// URLs, a rogue server can thus "trick" a libcurl-using application to read a local file instead of the remote one. This is a...

cURLlibcURL 7.19.3 - HTTP Location: Redirect Security Bypass

cURLlibcURL 7.19.3 - HTTP Location: Redirect Security Bypass source: https://www.securityfocus.com/bid/33962/info cURL/libcURL is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to bypass certain security restrictions and carry out various attacks. This issue...

cURL/libcURL 7.19.3 - HTTP 'Location:' Redirect Security Bypass

source: https://www.securityfocus.com/bid/33962/info cURL/libcURL is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to bypass certain security restrictions and carry out various attacks. This issue affects cURL/libcURL 5.11 through 7.19.3. Other versions may als...

curl -- cURL/libcURL Location: Redirect URLs Security Bypass

Secunia reports: The security issue is caused due to cURL following HTTP Location: redirects to e.g. scp:// or file:// URLs which can be exploited by a malicious HTTP server to overwrite or disclose the content of arbitrary local files and potentially execute arbitrary commands via specially...

PHP < 5.2.6 Multiple Vulnerabilities (Aug 2008)

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

Gentoo Security Advisory GLSA 200603-25 (openoffice openoffice-bin)

The remote host is missing updates announced in advisory GLSA 200603-25. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200603-19 (curl)

The remote host is missing updates announced in advisory GLSA 200603-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200603-25 (openoffice openoffice-bin)

The remote host is missing updates announced in advisory GLSA 200603-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Plugin WassUp 1.4.3 - to_date SQL Injection

WordPress Plugin WassUp 1.4.3 - todate SQL Injection getresults"SELECT id, wassupid, maxtimestamp as maxtimestamp, ip, hostname, searchengine, urlrequested, agent, referrer, spider, username, commentauthor FROM $tablename WHERE timestamp BETWEEN $fromdate AND $todate GROUP BY id ORDER BY...

PHP 5.2.5 cURL safe_mode bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.2.5 cURL safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 SecurityReason Date: - - Written: 21.08.2007 - - Public: 22.01.2008 SecurityReason Research SecurityAlert Id: 51 CVE: CVE-2007-4850 SecurityRisk: Medium Affected Software: PHP 5.2....

Debian Security Advisory DSA 919-1 (curl)

The remote host is missing an update to curl announced via advisory DSA 919-1. Several problems were discovered in libcurl, a multi-protocol file transfer library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-3185 A vulnerability has been discovered...

Debian Security Advisory DSA 919-1 (curl)

The remote host is missing an update to curl announced via advisory DSA 919-1. Several problems were discovered in libcurl, a multi-protocol file transfer library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-3185 A vulnerability has been discovered...

CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

Design/Logic Flaw

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

DEBIAN-CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...

CVE-2007-3564

CVE-2007-3564 affects libcurl versions 7.14.0–7.16.3 built with GnuTLS, where certificate expiration/activation dates are not checked, enabling bypass of access restrictions. Connected advisories note fixed packages: Debian/etch update to curl libcurl3-gnutls (e.g., 7.15.5-1etch1) and Ubuntu/Debi...

CVE-2007-3564

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions...