Lucene search
HistoryDec 31, 2005 - 5:00 a.m.
CVE-2005-4668
information security
parosproxy
hsqldb
cve-2005-4668
sql injection
jdk 1.4.2
7.4 High
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2_08, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845.
Related
cve
cve
CVE-2003-0845
2003-11-17 05:00:00
CVE-2005-2158
2005-07-06 04:00:00
nessus
nessus
CentOS 5 : openoffice.org / hsqldb (CESA-2007:1048)
2010-01-06 00:00:00
RHEL 5 : openoffice.org, hsqldb (RHSA-2007:1048)
2013-01-24 00:00:00
centos
centos
hsqldb, openoffice.org security update
2008-01-19 00:14:54
redhat
redhat
(RHSA-2007:1048) Moderate: openoffice.org, hsqldb security update
2007-12-05 00:00:00
7.4 High
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2005-4668