diff options
| author | sat <sat@FreeBSD.org> | 2006-10-06 13:12:29 +0800 |
|---|---|---|
| committer | sat <sat@FreeBSD.org> | 2006-10-06 13:12:29 +0800 |
| commit | 193ef793ae417c882a8faa0e0427617694f03f2f (patch) | |
| tree | 473bfac8dce2f0bbdcc6b35104bfd18dfabff710 /security | |
| parent | a4e4e597e03b8dddbf73b6f06bad3fdaf08454b7 (diff) | |
| download | freebsd-ports-gnome-193ef793ae417c882a8faa0e0427617694f03f2f.tar.gz freebsd-ports-gnome-193ef793ae417c882a8faa0e0427617694f03f2f.tar.zst freebsd-ports-gnome-193ef793ae417c882a8faa0e0427617694f03f2f.zip | |
- Document _ecalloc Integer Overflow Vulnerability in php5
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 20ead4df288d..5adc73ff1267 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,41 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="e329550b-54f7-11db-a5ae-00508d6a62df"> + <topic>php -- _ecalloc Integer Overflow Vulnerability</topic> + <affects> + <package> + <name>php5</name> + <range><lt>5.1.6_1</lt></range> + </package> + <package> + <name>php5-cli</name> + <name>php5-cgi</name> + <name>php5-dtc</name> + <name>php5-horde</name> + <name>php5-nms</name> + <name>mod_php5</name> + <range><ge>0</ge></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <blockquote cite="http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?view=log#rev1.162"> + <p>Ilia Alshanetsky reports lack of safety checks against + integer overflow in Zend Engine II.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2006-4812</cvename> + <url>http://secunia.com/advisories/22280/</url> + </references> + <dates> + <discovery>2006-09-30</discovery> + <entry>2006-10-06</entry> + </dates> + </vuln> + <vuln vid="8a5770b4-54b5-11db-a5ae-00508d6a62df"> <topic>mambo -- multiple SQL injection vulnerabilities</topic> <affects> |