diff options
| author | Martin Wilke <miwi@FreeBSD.org> | 2009-03-16 17:13:48 +0000 |
|---|---|---|
| committer | Martin Wilke <miwi@FreeBSD.org> | 2009-03-16 17:13:48 +0000 |
| commit | cd6c576ba42b28cfea52dafde9bdf2a419ea1d87 (patch) | |
| tree | 33308b457a2505da6f84e1342d3c68f042d39ac2 /security/vuxml/vuln.xml | |
| parent | 917343365e5dc5890169ffef271338e5c6d5cda1 (diff) | |
| download | ports-cd6c576ba42b28cfea52dafde9bdf2a419ea1d87.tar.gz ports-cd6c576ba42b28cfea52dafde9bdf2a419ea1d87.zip | |
Notes
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 4ebf705c9715..246c37a9bba3 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,43 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="a2074ac6-124c-11de-a964-0030843d3802"> + <topic>php-mbstring -- php mbstring buffer overflow vulnerability</topic> + <affects> + <package> + <name>php4-mbstring</name> + <range><lt>4.4.9</lt></range> + </package> + <package> + <name>php5-mbstring</name> + <range><lt>5.2.9</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>SecurityFocus reports:</p> + <blockquote cite="http://www.securityfocus.com/bid/32948"> + <p>PHP is prone to a buffer-overflow vulnerability because it fails to + perform boundary checks before copying user-supplied data to + insufficiently sized memory buffers. The issue affects the 'mbstring' + extension included in the standard distribution.</p> + <p>An attacker can exploit this issue to execute arbitrary machine + code in the context of the affected webserver. Failed exploit attempts + will likely crash the webserver, denying service to legitimate + users.</p> + </blockquote> + </body> + </description> + <references> + <bid>32948</bid> + <cvename>CVE-2008-5557</cvename> + </references> + <dates> + <discovery>2008-12-21</discovery> + <entry>2009-03-16</entry> + </dates> + </vuln> + <vuln vid="4ce3c20b-124b-11de-a964-0030843d3802"> <topic>phppgadmin -- directory traversal with register_globals enabled</topic> <affects> |