CVE Kennung:	CVE-2005-2491
Beschreibung:	Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap- based buffer overflow.
Test Kennungen:	1.3.6.1.4.1.25623.1.0.55469   1.3.6.1.4.1.25623.1.0.55150   1.3.6.1.4.1.25623.1.0.55159   1.3.6.1.4.1.25623.1.0.55142   1.3.6.1.4.1.25623.1.0.55582   1.3.6.1.4.1.25623.1.0.55318   1.3.6.1.4.1.25623.1.0.55462   1.3.6.1.4.1.25623.1.0.56376   1.3.6.1.4.1.25623.1.0.65631   1.3.6.1.4.1.25623.1.0.55254   1.3.6.1.4.1.25623.1.0.56387   1.3.6.1.4.1.25623.1.0.55149   1.3.6.1.4.1.25623.1.0.55207   1.3.6.1.4.1.25623.1.0.55140   1.3.6.1.4.1.25623.1.0.55186   1.3.6.1.4.1.25623.1.0.55158   1.3.6.1.4.1.25623.1.0.55225   1.3.6.1.4.1.25623.1.0.55409   1.3.6.1.4.1.25623.1.0.55253   1.3.6.1.4.1.25623.1.0.55194   1.3.6.1.4.1.25623.1.0.55410   1.3.6.1.4.1.25623.1.0.55295   1.3.6.1.4.1.25623.1.0.55161   1.3.6.1.4.1.25623.1.0.62435   1.3.6.1.4.1.25623.1.0.55505   1.3.6.1.4.1.25623.1.0.62508   1.3.6.1.4.1.25623.1.0.55174   1.3.6.1.4.1.25623.1.0.55173   1.3.6.1.4.1.25623.1.0.55169   1.3.6.1.4.1.25623.1.0.55202
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2491 http://docs.info.apple.com/article.html?artnum=302847 BugTraq ID: 14620 http://www.securityfocus.com/bid/14620 BugTraq ID: 15647 http://www.securityfocus.com/bid/15647 Debian Security Information: DSA-800 (Google Search) http://www.debian.org/security/2005/dsa-800 Debian Security Information: DSA-817 (Google Search) http://www.debian.org/security/2005/dsa-817 Debian Security Information: DSA-819 (Google Search) http://www.debian.org/security/2005/dsa-819 Debian Security Information: DSA-821 (Google Search) http://www.debian.org/security/2005/dsa-821 http://www.securityfocus.com/archive/1/427046/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200508-17.xml http://www.gentoo.org/security/en/glsa/glsa-200509-02.xml http://www.gentoo.org/security/en/glsa/glsa-200509-08.xml http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml HPdes Security Advisory: HPSBMA02159 http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 HPdes Security Advisory: HPSBOV02683 http://marc.info/?l=bugtraq&m=130497311408250&w=2 HPdes Security Advisory: HPSBUX02074 http://www.securityfocus.com/archive/1/428138/100/0/threaded HPdes Security Advisory: SSRT051251 http://www.securityfocus.com/archive/1/428138/100/0/threaded HPdes Security Advisory: SSRT061238 http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 HPdes Security Advisory: SSRT090208 http://marc.info/?l=bugtraq&m=130497311408250&w=2 https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E http://marc.info/?l=bugtraq&m=112606064317223&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11516 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1496 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1659 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A735 RedHat Security Advisories: RHSA-2005:358 http://www.redhat.com/support/errata/RHSA-2005-358.html RedHat Security Advisories: RHSA-2005:761 http://www.redhat.com/support/errata/RHSA-2005-761.html RedHat Security Advisories: RHSA-2006:0197 http://www.redhat.com/support/errata/RHSA-2006-0197.html SCO Security Bulletin: SCOSA-2006.10 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt http://securitytracker.com/id?1014744 http://secunia.com/advisories/16502 http://secunia.com/advisories/16679 http://secunia.com/advisories/17252 http://secunia.com/advisories/17813 http://secunia.com/advisories/19072 http://secunia.com/advisories/19193 http://secunia.com/advisories/19532 http://secunia.com/advisories/21522 http://secunia.com/advisories/22691 http://secunia.com/advisories/22875 SGI Security Advisory: 20060401-01-U ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U http://securityreason.com/securityalert/604 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 SuSE Security Announcement: SUSE-SA:2005:048 (Google Search) http://www.novell.com/linux/security/advisories/2005_48_pcre.html SuSE Security Announcement: SUSE-SA:2005:049 (Google Search) http://www.novell.com/linux/security/advisories/2005_49_php.html SuSE Security Announcement: SUSE-SA:2005:051 (Google Search) http://marc.info/?l=bugtraq&m=112605112027335&w=2 SuSE Security Announcement: SUSE-SA:2005:052 (Google Search) http://www.novell.com/linux/security/advisories/2005_52_apache2.html http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html http://www.vupen.com/english/advisories/2005/1511 http://www.vupen.com/english/advisories/2005/2659 http://www.vupen.com/english/advisories/2006/0789 http://www.vupen.com/english/advisories/2006/4320 http://www.vupen.com/english/advisories/2006/4502