121 matches found
SA-CONTRIB-2013-048 - Edit Limit - Access Bypass
Edit Limit enables you to set time and count-based limits on how and when a user can edit nodes or comments. The module doesn't sufficiently check user access when editing comments to see if the user has the necessary permissions to edit a comment outside of the limits applied by this module. Thi...
SOL14428 - MySQL vulnerability CVE-2012-2122
Recommended action None Supplemental Information The previous link will take you to a resource outside of AskF5, and it is possible that the document may be removed without our knowledge. SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view...
SuSE 11.1 Security Update : MySQL (SAT Patch Number 6613)
MySQL has been upgraded to version 5.0.96 to fix several vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000 exit0...
CentOS Update for mysql CESA-2013:0180 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedHat Update for mysql RHSA-2013:0180-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for mysql FEDORA-2012-19833
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for mysql FEDORA-2012-19833
Check for the Version of mysql OpenVAS Vulnerability Test Fedora Update for mysql FEDORA-2012-19833 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
SuSE Update for mysql openSUSE-SU-2012:0860-1 (mysql)
Check for the Version of mysql OpenVAS Vulnerability Test $Id: gbsuse201208601.nasl 8265 2018-01-01 06:29:23Z teissa $ SuSE Update for mysql openSUSE-SU-2012:0860-1 mysql Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is...
openSUSE: Security Advisory for mysql (openSUSE-SU-2012:0860-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2496-1 (mysql-5.1)
The remote host is missing an update to mysql-5.1 announced via advisory DSA 2496-1. OpenVAS Vulnerability Test $Id: deb24961.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2496-1 mysql-5.1 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
MySQL Server 5.5 < 5.5.24 Multiple Unspecified Vulnerabilities
Binary data 801157.prm...
mysql (CVE-2012-2122) (important)
Fixing CVE-2012-2122: authentication bypass due to incorrect type casting...
CVE-2012-2122
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remo...
Immunity Canvas: MYSQL_LOGIN_REMOTE
Name| mysqlloginremote ---|--- CVE| CVE-2012-2122 Exploit Pack| CANVAS Description| MySQL authentication bypass Notes| CVE Name: CVE-2012-2122 OSVDB: http://www.osvdb.org/displayvuln.php?osvdbid=??? Notes: Mysql authentication can be bypassed by bruteforcing a wrong password until the server miss...
CVE-2012-2122
CVE-2012-2122 affects Oracle MySQL and MariaDB where memcmp-based environments allow remote authentication bypass by repeatedly attempting with the same wrong password; the bypass occurs due to an improperly-checked return value in token comparison. Affected products/versions include MySQL 5.1.x ...
Ubuntu: Security Advisory (USN-1467-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
mysql-vuln-cve2012-2122 NSE Script
Attempts to bypass authentication in MySQL and MariaDB servers by exploiting CVE2012-2122. If its vulnerable, it will also attempt to dump the MySQL usernames and password hashes. All MariaDB and MySQL versions up to 5.1.61, 5.2.11, 5.3.5, 5.5.22 are vulnerable but exploitation depends on whether...
CVE-2012-2122
creationtimestamp| type| source ---|---|--- 2012-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19092 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysqlauthbypasshashdump.rb 2025-01-04...
[USN-1467-1] MySQL vulnerabilities
========================================================================== Ubuntu Security Notice USN-1467-1 June 11, 2012 mysql-5.1, mysql-5.5, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities ========================================================================== A security issue affects these...
Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : mysql-5.1, mysql-5.5, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities (USN-1467-1)
It was discovered that certain builds of MySQL incorrectly handled password authentication on certain platforms. A remote attacker could use this issue to authenticate with an arbitrary password and establish a connection. CVE-2012-2122 MySQL has been updated to 5.5.24 in Ubuntu 12.04 LTS. Ubuntu...