116 matches found
Mandrake Linux Security Advisory : MySQL (MDKSA-2005:060)
A number of vulnerabilities were discovered by Stefano Di Paola in the MySQL server : If an authenticated user had INSERT privileges on the 'mysql' database, the CREATE FUNCTION command allowed that user to use libc functions to execute arbitrary code with the privileges of the user running the...
CVE-2005-0711
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack...
CVE-2004-0711
The CVE describes a flaw in BEA WebLogic Server 6.x URL pattern matching where illegal patterns ending in “” are treated as the legal “/ ” wildcard. This could allow WebLogic 7.x to bypass access restrictions because these illegal patterns are (purportedly) rejected but effectively treated as all...
CVE-2004-0711
The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "" as wildcards as if they were the legal "/" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected...
MS03-044: Buffer Overrun in Windows Help (825119)
A security vulnerability exists in the Windows Help Service that could allow arbitrary code execution on an affected system. An attacker who successfully exploited this vulnerability could run code with Local System privileges on this host. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2003-0711
CVE-2003-0711 describes a stack-based buffer overflow in the PCHealth-HSC (Help and Support Center) HCP URL handling on Windows XP and Windows Server 2003. The unchecked buffer in the HCP protocol-handling file allows remote code execution with SYSTEM/Local privileges when a user clicks a crafted...
CVE-2002-0711
HP TruCluster Server Cluster Interconnect on HP TruCluster Server versions 5.0A, 5.1 and 5.1A has a potential DoS vulnerability. The issue, described in SSRT2265 and CVE-2002-0711, may allow local or remote attackers to disrupt service. Remediation is provided as early release patches (ERP kits):...
CVE-2002-0711
Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service...
CVE-2001-0711
Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface ILMI SNMP community string...
CVE-2001-0711
CVE-2001-0711 affects Cisco IOS 11.x and 12.0 with ATM support. The flaw allows an attacker to cause a denial of service via the undocumented ILMI SNMP community string. The issue is present in combinations of IOS releases that include ATM/ILMI support. Cisco documents a fix through free software...
CVE-2000-0711
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice...
CVE-2000-0711
Vulnerability summary (CVE-2000-0711) : Netscape Communicator fails to prevent a ServerSocket object from being created by untrusted entities, enabling a remote attacker to start a server on the victim’s system via a malicious applet (as demonstrated by Brown Orifice). The underlying issue is a f...
CVE-1999-0711
The vulnerability is in the oratclsh interpreter of Oracle 8.x Intelligent Agent for Unix, where the oratclsh component allows local users to execute Tcl commands with root privileges. The root cause is a local privilege escalation via the Tcl execution mechanism in the interpreter. Impact stated...
CVE-1999-0711
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root...