CVE - CVE-2005-2491

CVE-ID
CVE-2005-2491	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-159.htm APPLE:APPLE-SA-2005-11-29 URL:http://docs.info.apple.com/article.html?artnum=302847 DEBIAN:DSA-800 URL:http://www.debian.org/security/2005/dsa-800 DEBIAN:DSA-817 URL:http://www.debian.org/security/2005/dsa-817 DEBIAN:DSA-819 URL:http://www.debian.org/security/2005/dsa-819 DEBIAN:DSA-821 URL:http://www.debian.org/security/2005/dsa-821 FEDORA:FLSA:168516 URL:http://www.securityfocus.com/archive/1/427046/100/0/threaded GENTOO:GLSA-200509-02 URL:http://www.gentoo.org/security/en/glsa/glsa-200509-02.xml GENTOO:GLSA-200508-17 URL:http://www.gentoo.org/security/en/glsa/glsa-200508-17.xml GENTOO:GLSA-200509-08 URL:http://www.gentoo.org/security/en/glsa/glsa-200509-08.xml GENTOO:GLSA-200509-12 URL:http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml GENTOO:GLSA-200509-19 URL:http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml HP:HPSBUX02074 URL:http://www.securityfocus.com/archive/1/428138/100/0/threaded HP:SSRT051251 URL:http://www.securityfocus.com/archive/1/428138/100/0/threaded HP:HPSBMA02159 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 HP:SSRT061238 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 HP:HPSBOV02683 URL:http://marc.info/?l=bugtraq&m=130497311408250&w=2 HP:SSRT090208 URL:http://marc.info/?l=bugtraq&m=130497311408250&w=2 REDHAT:RHSA-2005:761 URL:http://www.redhat.com/support/errata/RHSA-2005-761.html REDHAT:RHSA-2006:0197 URL:http://www.redhat.com/support/errata/RHSA-2006-0197.html OPENPKG:OpenPKG-SA-2005.018 URL:http://marc.info/?l=bugtraq&m=112606064317223&w=2 REDHAT:RHSA-2005:358 URL:http://www.redhat.com/support/errata/RHSA-2005-358.html SCO:SCOSA-2006.10 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt SGI:20060401-01-U URL:ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U SUNALERT:102198 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 SUSE:SUSE-SA:2005:051 URL:http://marc.info/?l=bugtraq&m=112605112027335&w=2 SUSE:SUSE-SA:2005:048 URL:http://www.novell.com/linux/security/advisories/2005_48_pcre.html SUSE:SUSE-SA:2005:049 URL:http://www.novell.com/linux/security/advisories/2005_49_php.html SUSE:SUSE-SA:2005:052 URL:http://www.novell.com/linux/security/advisories/2005_52_apache2.html TRUSTIX:TSLSA-2005-0059 URL:http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html CONFIRM:http://www.ethereal.com/appnotes/enpa-sa-00021.html CONFIRM:http://www.php.net/release_4_4_1.php BID:14620 URL:http://www.securityfocus.com/bid/14620 BID:15647 URL:http://www.securityfocus.com/bid/15647 OVAL:oval:org.mitre.oval:def:11516 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11516 VUPEN:ADV-2005-1511 URL:http://www.vupen.com/english/advisories/2005/1511 VUPEN:ADV-2005-2659 URL:http://www.vupen.com/english/advisories/2005/2659 VUPEN:ADV-2006-0789 URL:http://www.vupen.com/english/advisories/2006/0789 VUPEN:ADV-2006-4320 URL:http://www.vupen.com/english/advisories/2006/4320 VUPEN:ADV-2006-4502 URL:http://www.vupen.com/english/advisories/2006/4502 OVAL:oval:org.mitre.oval:def:735 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A735 OVAL:oval:org.mitre.oval:def:1496 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1496 OVAL:oval:org.mitre.oval:def:1659 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1659 SECTRACK:1014744 URL:http://securitytracker.com/id?1014744 SECUNIA:17813 URL:http://secunia.com/advisories/17813 SECUNIA:16502 URL:http://secunia.com/advisories/16502 SECUNIA:16679 URL:http://secunia.com/advisories/16679 SECUNIA:19072 URL:http://secunia.com/advisories/19072 SECUNIA:19193 URL:http://secunia.com/advisories/19193 SECUNIA:17252 URL:http://secunia.com/advisories/17252 SECUNIA:19532 URL:http://secunia.com/advisories/19532 SECUNIA:21522 URL:http://secunia.com/advisories/21522 SECUNIA:22691 URL:http://secunia.com/advisories/22691 SECUNIA:22875 URL:http://secunia.com/advisories/22875 SREASON:604 URL:http://securityreason.com/securityalert/604
Assigning CNA
N/A
Date Entry Created
20050808	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20050808)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org