diff options
| author | miwi <miwi@FreeBSD.org> | 2009-03-17 01:13:48 +0800 |
|---|---|---|
| committer | miwi <miwi@FreeBSD.org> | 2009-03-17 01:13:48 +0800 |
| commit | 6d0c13fff6ac2d1a6b4effcf413d212ff3926aac (patch) | |
| tree | 7edf9fb8c97e6c26c578308d585e4bc89c9d431e /security | |
| parent | aa9dc346a5b9f9394d0d22418c6e5e514eeb8603 (diff) | |
| download | freebsd-ports-gnome-6d0c13fff6ac2d1a6b4effcf413d212ff3926aac.tar.gz freebsd-ports-gnome-6d0c13fff6ac2d1a6b4effcf413d212ff3926aac.tar.zst freebsd-ports-gnome-6d0c13fff6ac2d1a6b4effcf413d212ff3926aac.zip | |
- Document php-mbstring -- php mbstring buffer overflow vulnerability
PR: based on 130603
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 4ebf705c9715..246c37a9bba3 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,43 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="a2074ac6-124c-11de-a964-0030843d3802"> + <topic>php-mbstring -- php mbstring buffer overflow vulnerability</topic> + <affects> + <package> + <name>php4-mbstring</name> + <range><lt>4.4.9</lt></range> + </package> + <package> + <name>php5-mbstring</name> + <range><lt>5.2.9</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>SecurityFocus reports:</p> + <blockquote cite="http://www.securityfocus.com/bid/32948"> + <p>PHP is prone to a buffer-overflow vulnerability because it fails to + perform boundary checks before copying user-supplied data to + insufficiently sized memory buffers. The issue affects the 'mbstring' + extension included in the standard distribution.</p> + <p>An attacker can exploit this issue to execute arbitrary machine + code in the context of the affected webserver. Failed exploit attempts + will likely crash the webserver, denying service to legitimate + users.</p> + </blockquote> + </body> + </description> + <references> + <bid>32948</bid> + <cvename>CVE-2008-5557</cvename> + </references> + <dates> + <discovery>2008-12-21</discovery> + <entry>2009-03-16</entry> + </dates> + </vuln> + <vuln vid="4ce3c20b-124b-11de-a964-0030843d3802"> <topic>phppgadmin -- directory traversal with register_globals enabled</topic> <affects> |