68 matches found
Firebird on Gentoo Linux /etc/conf.d/firebird Invocation ISC_PASSWORD Authentication Bypass
The version of Firebird on the remote host sets the 'ISCPASSWORD' environment variable before starting the database server and uses that for remote client connections when a password is not supplied. An attacker can leverage this issue to connect as 'SYSDBA' with an empty password and gain access...
CVE-2008-1880
The CVE-2008-1880 entry concerns Firebird on Gentoo Linux. The default Gentoo init script sets the ISC_PASSWORD environment variable when starting Firebird, which is used for remote SYSDBA connections if no password is supplied. This allows remote attackers to bypass SYSDBA authentication and obt...
CVE-2007-1880
CVE-2007-1880: Integer overflow in the NtSetValueKey function within klif.sys exposes a heap overflow in Kaspersky Anti-Virus/Internet Security 6.0 (prior to Maintenance Pack 2, build 6.0.2.614). The issue is triggered by a large unsigned data size argument, allowing context-dependent attackers w...
CVE-2006-1880
Technical details about CVE-2006-1880 are not publicly provided in the supplied documents; no concrete affected products, impact or remediation are specified. Monitor for updates.
CVE-2002-1880
LokwaBB 1.2.2 contains a vulnerability where remote attackers can read arbitrary messages by modifying the pmid parameter in pm.php. The affected component is the web application logic handling pmid values; concrete root cause is improper handling/validation of the pmid input that leads to unauth...
CVE-2005-1880
Vulnerability summary (CVE-2005-1880) everybuddy versions 0.4.3 and earlier are affected. Local users can overwrite arbitrary files through a symlink attack on a temporary file created by a system call to wget. The PT-2005-2837 entry confirms the affected versions and describes the issue as a sym...
CVE-2004-1880
Technical details about CVE-2004-1880 are not provided in the connected documents. The available entries reiterate the memory leak in OpenLDAP’s back-bdb backend for 2.1.12 and earlier. Monitor for updates.
