154 matches found
[Full-disclosure] DropAFew - SQL injection and authorization issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================ ||| Security Advisory AKLINK-SA-2007-002 ||| ||| CVE-2007-1363 CVE candidate ||| ||| CVE-2007-1364 CVE candidate ||| ============================================ DropAFew - Multiple vulnerabilities SQL...
raptor_oraextproc.sql.txt
-- $Id: raptororaextproc.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororaextproc.sql - command exec via oracle extproc -- Copyright c 2006 Marco Ivaldi -- -- Directory traversal vulnerability in extproc in Oracle 9i and 10g -- allows remote attackers to access arbitrary libraries outsid...
Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit
No description provided by source. -- -- $Id: raptororaextproc.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororaextproc.sql - command exec via oracle extproc -- Copyright c 2006 Marco Ivaldi [email protected] -- -- Directory traversal vulnerability in extproc in Oracle 9i and 10g --...
Oracle 9i/10g - 'extproc' Local/Remote Command Execution
-- -- $Id: raptororaextproc.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororaextproc.sql - command exec via oracle extproc -- Copyright c 2006 Marco Ivaldi -- -- Directory traversal vulnerability in extproc in Oracle 9i and 10g -- allows remote attackers to access arbitrary libraries...
Solaris 9 (sparc) : 118829-04
Sun Management Center 3.5.1: Solaris 9 Oracle Patch. Date this patch was last updated by Sun : Jun/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...
CVE-2006-1364
CVE-2006-1364 affects the Microsoft IIS worker process (w3wp.exe) when AspCompat is not used for referencing COM components in ASP.NET. The issue can allow remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting multiple documents that reference COM ...
CVE-2005-1364
CVE-2005-1364 describes multiple SQL injection vulnerabilities in MetaBid Auctions that allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp. The initial and connected documents confirm a SQLi ...
CVE-2004-1364
CVE-2004-1364 is an Oracle extproc directory traversal vulnerability affecting Oracle 9i and 10g. The flaw allows remote attackers to access arbitrary libraries outside the $ORACLE_HOME/bin directory by leveraging the extproc mechanism, potentially executing OS commands with the privileges of the...
CVE-2002-1364
CVE-2002-1364 describes a buffer overflow in traceroute-nanog’s get_origin() function triggered by long WHOIS responses. This leads to arbitrary code execution and potential privilege escalation on affected systems. Public advisories (Debian DSA-254-1) note the issue was fixed in traceroute-nanog...
CVE-2004-1364
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLEHOME\bin directory...
CVE-2003-1364
Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service crash via an HTTP GET message with empty 1 Connection or 2 Range fields...
CVE-2002-1364
Buffer overflow in the getorigin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses...
CVE-2001-1364
CVE-2001-1364 concerns AutoDNS prior to version 0.0.4, involving autodns.pl and domain names that are not fully qualified. Affected product: AutoDNS with the autodns.pl component; vulnerability described as related to handling of not-fully-qualified domain names. The CVSS v2 base score is 7.5 (HI...
