glibc: __tzfile_read integer overflow to buffer overflow

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code wi...

Medium: glibc

Issue Overview: An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute...

glibc: __tzfile_read integer overflow to buffer overflow

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code wi...

Moderate: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

PHP < 5.3.9 Multiple Vulnerabilities

Binary data 801116.prm...

PHP < 5.3.9 Multiple Vulnerabilities

Binary data 6263.prm...

PHP < 5.3.9 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 5.3.9. As such, it may be affected by the following security issues : - The 'isa' function in PHP 5.3.7 and 5.3.8 triggers a call to 'autoload'. CVE-2011-3379 - It is possible to create a denial of service...

PHP < 5.3.9 Multiple DoS Vulnerabilities - Windows

PHP is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if...

CVE-2009-5029

Integer overflow in the tzfileread function in glibc before 2.15 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted timezone TZ file, as demonstrated using vsftpd...

Mandriva Update for timezone MDVA-2011:072 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2011:072 timezone Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2011:072 : timezone

Timezone is a package that contains data files with rules for various timezones around the world. This update addresses the following changes: - Fiji adopts DST for 2011 effective Oct 23rd, 2011 - West Bank changes date for DST end in 2011 to Sep 30th - Fix DST for: Pridnestrovian Moldavian...

Mandriva Update for timezone MDVA-2011:072 (timezone)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for timezone MDVA-2011:058 (timezone)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for timezone MDVA-2011:058 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2011:058 timezone Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2011:058 : timezone

Timezone is a package that contains data files with rules for various timezones around the world. In autumn 2011 Russia, Belarus and Ukraine drop transition on winter time. Palestine suspends DST during Ramadan in 2011. Gaza and West Bank split in 2011. West Bank is tracked in the timezone...

php5 -- Denial of Service in php_date_parse_tzfile()

MITRE CVE team reports: Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service memory consumption by triggering many strtotime function calls, which are not properly handled by the phpdateparsetzfile cache...

SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 6741)

IBM Java 5 was updated to Service Refresh 11. It fixes lots of bugs and security issues. The timezone update to 1.6.9s with the latest Fiji change. - A vulnerability in the Java Runtime Environment with decoding DER encoded data might allow a remote client to cause the JRE to crash, resulting in ...

SuSE9 Security Update : glibc (YOU Patch Number 12641)

Several security issues were fixed : - Integer overflow causing arbitrary code execution in ld.so --verify mode could be induced by a specially crafted binary. CVE-2010-0830 - The addmntent function would not escape the newline character properly, allowing the user to insert arbitrary newlines to...

e107 0.7.21 cross site scripting Vulnerabilities

No description provided by source. After Rigester Go to user Seting 1 - http://127.0.0.1/e107/usersettings.php and Edit Signature / Timezone Put this code Or other's """scriptlocation="http://w ww.arab-blackhat.co.cc"/script"""" ScRiPtalert213771818860/ScRiPt Dz-Ghost Team ===== Saoucha Star08...

Mandriva Update for timezone MDVA-2010:138 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2010:138 timezone Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...