RedHat Security Advisory RHSA-2009:0259

The remote host is missing updates announced in advisory RHSA-2009:0259. The modauthmysql package includes an extension module for the Apache HTTP Server which can be used to implement web user authentication against a MySQL database. A flaw was found in the way modauthmysql escaped certain...

mod_auth_mysql security update

3.0.0-3.2 - add security fix for CVE-2008-2384 480613...

CVE-2008-2384

SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ backslash as part of the character encoding, allows remote attackers to execute arbitrary SQL...

CVE-2008-2384

SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ backslash as part of the character encoding, allows remote attackers to execute arbitrary SQL...

CVE-2002-2384

The CVE-2002-2384 entry concerns Hotfoon 4.00. hotfoon4.exe stores user names and passwords in cleartext in the hotfoon2 registry key, enabling local users to gain access to user accounts and steal phone service. Root cause: credentials stored in plaintext in a registry location. Impact: local ac...

CVE-2007-2384

The CVE-2007-2384 entry concerns the Script.aculo.us framework, where data is exchanged as JSON without protection. The underlying issue (JavaScript Hijacking) allows remote attackers to obtain data by loading a page that retrieves JSON via a SCRIPT tag SRC attribute and then captures it with oth...

CVE-2004-2384

Affected software: NullSoft Winamp versions around 5.02 and older (Winamp

CVE-2005-2384

CVE-2005-2384 describes a directory traversal in a third‑party compression library (UNACEV2.DLL) used by Avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460. The vulnerability allows a remote attacker to write arbitrary files by supplying an ACE archive with filenames co...

CVE-2002-2384

hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service...