50 matches found
CVE-2007-1381
The wddxdeserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent attackers to execute arbitrary code via a WDDX packet wit...
Buffer overflow
The wddxdeserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent attackers to execute arbitrary code via a WDDX packet wit...
CVE-2007-1381
The wddxdeserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent attackers to execute arbitrary code via a WDDX packet wit...
CVE-2007-1381
CVE-2007-1381 affects PHP 5, where wddx_deserialize in wddx.c (versions 1.119.2.10.2.12/1.119.2.10.2.13) uses incorrect arguments to strlcat, calling strlcpy instead and enabling a buffer overflow via a malformed WDDX STRING overlap. It was modified in CVS on 20070224 and fixed on 20070304. Affec...
CVE-2007-1381
The wddxdeserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent attackers to execute arbitrary code via a WDDX packet wit...
PHP wddx_deserialize() String Append Crash Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || // // | |/ || '|/ |/ -| ' / -/ |||| /| || / //...
PHP wddx_deserialize() String Append Crash Exploit
Exploit for multiple platform in category dos / poc ================================================== PHP wddxdeserialize String Append Crash Exploit ================================================== AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCCCCCCCCCCCCCCCC...
PHP 5 - 'wddx_deserialize()' String Append Crash
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC "; ? milw0rm.com 2007-03-04...
MOPB-09-2007:PHP wddx_deserialize() String Append Buffer Overflow Vulnerability
Summary Since Stefan Esser left the PHP Security Response Team there have been countless of pseudo security fixes to the PHP CVS. With pseudo security fixes we mean replacing safe calls of functions considered unsafe like strncpy, sprintf with calls to functions considered more secure e.g. strlcp...
