FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  365353
Date:      2014-08-18
Time:      21:11:32Z
Committer: flo

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89php -- potential overflow in _php_stream_scandir

The PHP Development Team reports:

The release of PHP 5.4.15 and 5.4.5 fix a potential overflow in _php_stream_scandir


Discovery 2012-07-19
Entry 2012-07-23
Modified 2013-01-15
php5
gt 5.4 lt 5.4.5

php53
lt 5.3.15

php52
le 5.2.17_10

CVE-2012-2688
http://www.php.net/archive/2012.php#id2012-07-19-1
bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89php -- potential overflow in _php_stream_scandir

The PHP Development Team reports:

The release of PHP 5.4.15 and 5.4.5 fix a potential overflow in _php_stream_scandir


Discovery 2012-07-19
Entry 2012-07-23
Modified 2013-01-15
php5
gt 5.4 lt 5.4.5

php53
lt 5.3.15

php52
le 5.2.17_10

CVE-2012-2688
http://www.php.net/archive/2012.php#id2012-07-19-1
1d23109a-9005-11e2-9602-d43d7e0c7c02php5 -- Multiple vulnerabilities

The PHP development team reports:

PHP does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.

The SOAP parser in PHP allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.


Discovery 2013-03-04
Entry 2013-03-18
php5
lt 5.4.13

php53
lt 5.3.23

CVE-2013-1635
CVE-2013-1643
bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89php -- potential overflow in _php_stream_scandir

The PHP Development Team reports:

The release of PHP 5.4.15 and 5.4.5 fix a potential overflow in _php_stream_scandir


Discovery 2012-07-19
Entry 2012-07-23
Modified 2013-01-15
php5
gt 5.4 lt 5.4.5

php53
lt 5.3.15

php52
le 5.2.17_10

CVE-2012-2688
http://www.php.net/archive/2012.php#id2012-07-19-1
bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89php -- potential overflow in _php_stream_scandir

The PHP Development Team reports:

The release of PHP 5.4.15 and 5.4.5 fix a potential overflow in _php_stream_scandir


Discovery 2012-07-19
Entry 2012-07-23
Modified 2013-01-15
php5
gt 5.4 lt 5.4.5

php53
lt 5.3.15

php52
le 5.2.17_10

CVE-2012-2688
http://www.php.net/archive/2012.php#id2012-07-19-1
bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89php -- potential overflow in _php_stream_scandir

The PHP Development Team reports:

The release of PHP 5.4.15 and 5.4.5 fix a potential overflow in _php_stream_scandir


Discovery 2012-07-19
Entry 2012-07-23
Modified 2013-01-15
php5
gt 5.4 lt 5.4.5

php53
lt 5.3.15

php52
le 5.2.17_10

CVE-2012-2688
http://www.php.net/archive/2012.php#id2012-07-19-1