what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Debian Linux Security Advisory 1572-1

Posted May 12, 2008

Authored by Debian | Site debian.org

Debian Security Advisory 1572-1 - Several vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language. The glob function allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter. Integer overflow allows context-dependent attackers to cause a denial of service and possibly have other impact via a printf format parameter with a large width specifier. Stack-based buffer overflow in the FastCGI SAPI. The escapeshellcmd API function could be attacked via incomplete multibyte chars.

tags | advisory, denial of service, overflow, arbitrary, php, vulnerability

systems | linux, debian

advisories | CVE-2007-3806, CVE-2008-1384, CVE-2008-2050, CVE-2008-2051

SHA-256 | 883573f7a0443ab580c60394e55fb82a284db1f4f899b409ab00c01fd23259fb

Download | Favorite | View

Related Files

No related files