212 matches found
SLES9: Security update for PHP4
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-wddx php4-servlet php4-sysvshm php4 php4-pear php4-exif php4-recode php4-mysql modphp4-servlet php4-imap php4-mbstring php4-gd apache-modphp4 modphp4-co...
SLES9: Security update for PHP4
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-wddx php4-servlet php4-sysvshm php4 php4-pear php4-exif php4-recode php4-mysql modphp4-servlet php4-imap php4-mbstring php4-gd apache-modphp4 modphp4-co...
SLES9: Security update for Security update PHP4
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-modphp4 apache2-modphp4 modphp4 modphp4-apache2 modphp4-core modphp4-servlet php4 php4-bcmath php4-bz2 php4-calendar php4-ctype php4-curl php4-dba...
SLES9: Security update for PHP4
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-zlib php4-shmop php4-ftp php4-filepro php4-mcrypt php4-servlet php4-gmp php4-bz2 php4-snmp php4-mysql php4-mimemagic php4 php4-pgsql modphp4-servlet...
Mandriva Update for php MDKSA-2007:048 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:048 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Ubuntu Update for php5 vulnerabilities USN-424-1
Ubuntu Update for Linux kernel vulnerabilities USN-424-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4241.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 vulnerabilities USN-424-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
php -- multiple vulnerabilities
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 2102)
the CURL module lacked checks for control characters CVE-2006-2563 - strrepeat contained an integer overflow - ext/wddx contained a buffer overflow - memorylimit lacked checks for integer overflows - a bug in sscanf could potentially be exploited to execute arbitrary code. CVE-2006-4020 - an...
Ubuntu 5.10 / 6.06 LTS / 6.10 : php5 vulnerabilities (USN-424-1)
Multiple buffer overflows have been discovered in various PHP modules. If a PHP application processes untrusted data with functions of the session or zip module, or various string functions, a remote attacker could exploit this to execute arbitrary code with the privileges of the web server...
Ubuntu 5.10 / 6.06 LTS / 6.10 : php5 regression (USN-424-2)
USN-424-1 fixed vulnerabilities in PHP. However, some upstream changes were not included, which caused errors in the stream filters. This update fixes the problem. We apologize for the inconvenience. Multiple buffer overflows have been discovered in various PHP modules. If a PHP application...
Important: Red Hat Security Advisory: php security update
Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A...
CVE-2007-1381
The wddxdeserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent attackers to execute arbitrary code via a WDDX packet wit...
USN-424-2: PHP regression
USN-424-1 fixed vulnerabilities in PHP. However, some upstream changes were not included, which caused errors in the stream filters. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple buffer overflows have been discovered in various PHP modules...
MOPB-11-2007:PHP WDDX Session Deserialization Information Leak Vulnerability
Summary The PHP WDDX extension comes with a serialization handler that adds support for the WDDX data format to PHP's session handling. When this data contains a numerical key the keylength variable is not properly initialized which will leak an arbitrary amount of stack data into the session arr...
PHP < 4.4.5 / 5.2.1 WDDX Session Deserialization Information Leak
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || // // | |/ || '|/ |/ -| ' / -/ |||| /| || / //...
PHP WDDX buffer overflow
Buffer overflow on malformed WDDX packet...
PHP 4.4.55.2.1 - WDDX Session Deserialization Information Leak
PHP 4.4.55.2.1 - WDDX Session Deserialization Information Leak A1"; $keys = arraykeys$SESSION; $stackdump = $keys1; echo "Stackdump\n-...
PHP < 4.4.5 / 5.2.1 WDDX Session Deserialization Information Leak
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
