239 matches found
DEBIAN-CVE-2017-5630
PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite...
CVE-2017-5630
PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite...
CVE-2017-5630
PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite...
CVE-2017-5630
CVE-2017-5630 affects PEAR Base System v1.10.1; PECL in the Installer’s download utility does not validate file types/filenames after redirects, allowing remote HTTP servers to overwrite files via crafted responses (e.g., .htaccess). Documented impact is file overwrite; no patch/remediation detai...
PECL HTTP: Remote execution of arbitrary code
Background This HTTP extension aims to provide a convenient and powerful set of functionality for one of PHPs major applications. Description A buffer overflow can be triggered in the URL parsing functions of the PECL HTTP extension. This allows overflowing a buffer with data originating from an...
GLSA-201612-17 : PECL HTTP: Remote execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201612-17 PECL HTTP: Remote execution of arbitrary code A buffer overflow can be triggered in the URL parsing functions of the PECL HTTP extension. This allows overflowing a buffer with data originating from an arbitrary HTTP...
Fedora Update for php-pecl-zip FEDORA-2016-ea58a428a1
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : php-pecl-zip (2016-ea58a428a1)
Version 1.13.5 - Fixed bug php72660 NULL pointer dereference in zendvirtualcwd. Laruence - Fixed bug php68302 impossible to compile php with zip support. cmb - Fixed bug php70752 Depacking with wrong password leaves 0 length files. cmb Note that Tenable Network Security has extracted the precedin...
Fedora Update for php-pecl-zip FEDORA-2016-0312cf1dcd
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-pecl-zip FEDORA-2016-b9cb75981a
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 24 : php-pecl-zip (2016-b9cb75981a)
Version 1.13.5 - Fixed bug php72660 NULL pointer dereference in zendvirtualcwd. Laruence - Fixed bug php68302 impossible to compile php with zip support. cmb - Fixed bug php70752 Depacking with wrong password leaves 0 length files. cmb Note that Tenable Network Security has extracted the precedin...
Fedora 23 : php-pecl-zip (2016-0312cf1dcd)
Version 1.13.5 - Fixed bug php72660 NULL pointer dereference in zendvirtualcwd. Laruence - Fixed bug php68302 impossible to compile php with zip support. cmb - Fixed bug php70752 Depacking with wrong password leaves 0 length files. cmb Note that Tenable Network Security has extracted the precedin...
[SECURITY] Fedora 24 Update: php-pecl-zip-1.13.5-1.fc24
Zip is an extension to create and read zip files...
[SECURITY] Fedora 25 Update: php-pecl-zip-1.13.5-1.fc25
Zip is an extension to create and read zip files...
Internet Bug Bounty: Heap overflow caused by type confusion vulnerability in merge_param()
Since the original report is still marked as private in the PHP bug tracker please find the copy & pasted bug report below edited for readability and to include correct bug tracker id. See the references section for a link to the issue in the PHP bug tracker! The maintainer already fixed the issu...
Fedora Update for php-pecl-zip FEDORA-2016-b777fc7a8b
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-pecl-zip FEDORA-2016-3af39b1fcb
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 24 : php-pecl-zip (2016-3af39b1fcb)
Version 1.13.4 - Fixed bug php72520 Stack-based buffer overflow vulnerability in phpstreamzipopener. Stas Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...
Fedora 23 : php-pecl-zip (2016-b777fc7a8b)
Version 1.13.4 - Fixed bug php72520 Stack-based buffer overflow vulnerability in phpstreamzipopener. Stas Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...