EUVD-2003-0676

Malware in sbrugna...

Timing Attack

symfony/symfony is vulnerable to timing attack. When checking the signature of an URI an ESI fragment URL for instance, the URISigner did not used a constant time string comparison function, allowing a remote attacker to guess the URI by analyzing the server response time...

newsfetch -- server response buffer overflow vulnerability

The newsfetch program uses the sscanf function to read information from server responses into static memory buffers. Unfortunately this is done without any proper bounds checking. As a result long server responses may cause an overflow when a newsgroup listing is requested from an NNTP server...