100 matches found
FreeBSD Ports: mysql-server
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
USN-671-1: MySQL vulnerabilities
It was discovered that MySQL could be made to overwrite existing table files in the data directory. An authenticated user could use the DATA DIRECTORY and INDEX DIRECTORY options to possibly bypass privilege checks. This update alters table creation behaviour by disallowing the use of the MySQL...
MySQL Enterprise Server 5.0 < 5.0.70 Privilege Bypass
The version of MySQL Enterprise Server 5.0 installed on the remote host is earlier than 5.0.70. In such versions, it is possible for a local user to circumvent privileges through the creation of MyISAM tables employing the 'DATA DIRECTORY' and 'INDEX DIRECTORY' options to overwrite existing table...
CVE-2008-4097
MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed wh...
FreeBSD Ports: mysql-server
The remote host is missing an update to the system as announced in the referenced advisory. VID 388d9ee4-7f22-11dd-a66a-0019666436c2 OpenVAS Vulnerability Test $ Description: Auto generated from VID 388d9ee4-7f22-11dd-a66a-0019666436c2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: mysql-server
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-5341)
The database server MySQL was updated to fix a security problem : CVE-2008-2079: MySQL allowed local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory, whic...
RHEL 4 : mysql (RHSA-2008:0768)
Updated mysql packages that fix various security issues, several bugs, and add an enhancement are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database...
Debian Security Advisory DSA 1608-1 (mysql-dfsg-5.0)
The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1608-1. OpenVAS Vulnerability Test $Id: deb16081.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1608-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...
Debian DSA-1608-1 : mysql-dfsg-5.0 - authorization bypass
Sergei Golubchik discovered that MySQL, a widely-deployed database server, did not properly validate optional data or index directory paths given in a CREATE TABLE statement, nor would it under proper conditions prevent two databases from using the same paths for data or index files. This permits...
[SECURITY] [DSA 1608-1] New mysql-dfsg-5.0 packages fix authorization bypass
------------------------------------------------------------------------ Debian Security Advisory DSA-1608-1 [email protected] http://www.debian.org/security/ Devin Carraway July 13, 2008 http://www.debian.org/security/faq -...
DSA-1608-1 mysql-dfsg-5.0 - authorization bypass
Bulletin has no description...
CVE-2008-2079
CVE-2008-2079 affects MySQL 4.1.x <4.1.24, 5.0.x <5.0.60, 5.1.x <5.1.24, and 6.0.x
CVE-2007-2079
The CVE-2007-2079 issue affects XAMPP 1.6.0a and earlier on Windows, where ADONewConnection::Connect in adodb.php uses an untrusted hostname input. This can trigger a library buffer overflow in mssql_connect/mssql_pconnect scenarios and allow arbitrary code execution by passing a long host parame...
CVE-2006-2079
CVE-2006-2079 describes a cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery, specifically in portfolio.php, potentially affecting versions before 1.0.2. The flaw is exploitable via the cat_id parameter, enabling remote attackers to inject arbitrary web script or HTML...
CVE-2002-2079
mosix-protocol-stack in Multicomputer Operating System for UnIX MOSIX 1.5.7 allows remote attackers to cause a denial of service via malformed packets...
CVE-2002-2079
CVE-2002-2079 concerns the mosix-protocol-stack in MOSIX 1.5.7, where remote attackers can cause a denial of service by sending malformed packets. The description is consistently reported across NVD/Red Hat/CVE listings and related references, indicating network-exposed impact without details on ...
CVE-2005-2079
CVE-2005-2079 describes a heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0–10.0 on Windows Servers. The flaw is capable of enabling remote attackers to execute arbitrary code. The root cause is a heap-based overflow in the Admin Plus Pack Option, leading to pot...
CVE-2004-2079
Red-M Red-Alert 2.7.5 with software 3.1 build 24 is affected: authentication is bound to client IPs, allowing remote attackers to bypass authentication by connecting from the same IP as an active authenticated user. No explicit root cause, affected components, versions beyond what's stated are pr...
CVE-2004-2079
Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user...