138 matches found
[SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1071-1 [email protected] http://www.debian.org/security/ Martin Schulze May 22nd, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1071-1 [email protected] http://www.debian.org/security/ Martin Schulze May 22nd, 2006 http://www.debian.org/security/faq -...
DSA-1071-1 mysql - several vulnerabilities
Bulletin has no description...
Security fix for the ALT Linux 5 package MySQL version 5.0.18-alt2
April 9, 2006 Konstantin Lepikhov 5.0.18-alt2 - Added patches: + BUG15719 fix see 9348 for details; + BUG17667 aka CVE-2006-0903 fix;...
BELL-CVE-2006-0903 CVE-2006-0903 does not affect BellSoft software
Bulletin has no description...
CVE-2006-0903
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysqlrealquery function. NOTE: this issue was originally reported for the mysqlquery function, but the vendor states that since mysqlquer...
CVE-2006-0903
CVE-2006-0903 is documented in multiple advisories as a local vulnerability in MySQL up to version 5.0.18 and earlier, where a NULL character in SQL queries could bypass logging via mysql_real_query. The issue is reported across Red Hat, Debian, and Scientific Linux advisories and OpenVAS entries...
CVE-2005-0903
CVE-2005-0903 is a concrete vulnerability in Apple QuickTime PictureViewer (versions around 6.5.1, with advisories noting 6.5.2 as a fix). The issue is a buffer overflow in the PictureViewer component when parsing JPEG images containing crafted Huffman Table (DHT) data, enabling remote denial of ...
CVE-2004-0903
CVE-2004-0903 describes a stack-based buffer overflow in the writeGroup function of nsVCardObj.cpp, affecting Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8. An attacker could remotely execute arbitrary code by processing malformed VCard attachments d...
CVE-2004-0903
Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing...
CVE-2003-0903
CVE-2003-0903 corresponds to a buffer overflow in Microsoft Data Access Components (MDAC) 2.5–2.8. The vulnerability resides in a MDAC component that handles responses to SQL Server discovery broadcasts; a malicious UDP reply to a broadcast request can trigger a buffer overrun. Exploitation could...
CVE-2003-0903
Buffer overflow in a component of Microsoft Data Access Components MDAC 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request...
CVE-2002-0903
register.php for WoltLab Burning Board wbboard 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack...
CVE-2001-0903
Linear key exchange process in High-bandwidth Digital Content Protection HDCP System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication...
CVE-2000-0903
CVE-2000-0903 concerns a directory traversal vulnerability in the Voyager web server 2.01B bundled with the QNX 405 demo disks. The issue allows remote attackers to read arbitrary files by performing a dot-dot (.. ) traversal. The affected component is the Voyager web server; root cause is improp...
CVE-1999-0903
The CVE-1999-0903 issue affects the AIX Packet Filtering Module, specifically the genfilt component, which does not properly filter traffic destined to ports greater than 32767. The PT-1999-1449 entry confirms the vulnerable software (AIX, genfilt) and affected behavior, but does not specify affe...