USN-1467-1: MySQL vulnerabilities

It was discovered that certain builds of MySQL incorrectly handled password authentication on certain platforms. A remote attacker could use this issue to authenticate with an arbitrary password and establish a connection. CVE-2012-2122 MySQL has been updated to 5.5.24 in Ubuntu 12.04 LTS. Ubuntu...

CVE-2012-2122

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remo...

[BGA - SignalSEC Advisory]:Adobe Shockwave Player Remote Code Execution

Affected Vendors: Adobe Affected Products: Shockwave Player CVE ID: CVE-2011-2122 Risk Level: High Vulnerability: Memory Corruption Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interacti...

CVE-2011-2122

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors related to rcsL substructures, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320,...

CVE-2011-2122

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors related to rcsL substructures, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320,...

CVE-2011-2122

Adobe Shockwave Player (Dirapi.dll) is affected by CVE-2011-2122 before version 11.6.0.626, with memory corruption potentially leading to arbitrary code execution or denial of service via unspecified vectors related to rcsL substructures. This is one of several CVEs tied to Shockwave in the same ...

Debian Security Advisory DSA 2122-2 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 2122-2. OpenVAS Vulnerability Test $Id: deb21222.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2122-2 glibc Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2122-1 : glibc - missing input sanitization

Ben Hawkes and Tavis Ormandy discovered that the dynamic loader in GNU libc allows local users to gain root privileges using a crafted LDAUDIT environment variable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debi...

CVE-2010-2122

CVE-2010-2122 affects Joomla! through the SimpleDownload (com_simpledownload) component prior to 0.9.6. The vulnerability is a directory traversal flaw that allows remote attackers to retrieve arbitrary local files by supplying a double dot (..) in the controller parameter to index.php. Affected ...

CVE-2010-2122

creationtimestamp| type| source ---|---|--- 2010-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12623 2010-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12618...

CVE-2009-2122

CVE-2009-2122 affects the WordPress Photoracer plugin 1.0, with a SQL injection in viewimg.php via the id parameter that allows remote execution of arbitrary SQL commands. Impact is partial confidentiality/integrity/availability per the CVSS. Public references show exploitation (e.g., Exploit-DB)...

CVE-2008-2122

CVE-2008-2122 affects IBM Rational Build Forge 7.0.2. A port scan can trigger multiple bfagent server processes that attempt to read from closed sockets, causing CPU consumption and a DoS (availability impact). Public references describe the issue as remote, with the impact described as partial (...

CVE-2007-2122

Unspecified vulnerability in the Wireless component in Oracle Application Server 9.0.4.3 has unknown impact and attack vectors, aka AS03...

CVE-2007-2122

Technical details about CVE-2007-2122 are not publicly available in the provided documents. Monitor for updates from authoritative sources; the materials here only reiterate an unspecified vulnerability in the Oracle Application Server Wireless component without specifics.

CVE-2006-2122

PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: the original report for this issue is probably erroneous, since CoolMenus does not appear to be written in PHP...

CVE-2006-2122

PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: the original report for this issue is probably erroneous, since CoolMenus does not appear to be written in PHP...

CVE-2005-2122

CVE-2005-2122 corresponds to a Windows Shell buffer overflow in the handling of .lnk shortcut files, enabling remote code execution when a user opens a specially crafted shortcut or properties dialog. The issue affects Windows 2000 SP4, XP SP1/SP2, and Windows Server 2003, and is part of the MS05...

Microsoft Windows Shell fails to handle shortcut files properly

Overview Microsoft Windows Shell does not properly handle some shortcut files and may permit arbitrary code execution when a specially-crafted file is opened. Description Microsoft Windows supports files that point to another file, called "shortcut" files. These files have the .lnk extension, and...

CVE-2002-2122

Pointsec for PalmOS (before 1.2) stores a user PIN in plaintext in memory. This enables a local attacker who steals an unlocked Palm to retrieve the PIN via memory dump. The available connected documents confirm the product (Pointsec for PalmOS), the vulnerable behavior (plaintext PIN in memory),...

CVE-2004-2122

CVE-2004-2122 describes a cross-site scripting (XSS) vulnerability in Intra Forum’s intraforum_db.cgi, exploitable via the use_last_read or forum parameters. Affected software/function: Intra Forum web application (intraforum_db.cgi). Root cause: unsanitized input leading to script/HTML injection...