[SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1413-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 26, 2007 http://www.debian.org/security/faq -...

[email protected], [email protected]

=========================================================== Ubuntu Security Notice USN-528-1 October 11, 2007 mysql-dfsg-5.0 vulnerabilities CVE-2007-2583, CVE-2007-2691, CVE-2007-3780, CVE-2007-3782 =========================================================== A security issue affects the followin...

Security fix for the ALT Linux 5 package MySQL version 5.0.41-alt1

May 28, 2007 Konstantin Lepikhov 5.0.41-alt1 - 5.0.41 release. - Fix CVE-2007-2583 DoS Failure to Handle Exceptional Conditions. - Added patches from BK: + BUG28337 NOT EXISTS with GROUP BY behaves different in 5.0.40. - Update ALTLinux patches: + install-db patch. + username-length patch. -...

CVE-2007-2583

The vulnerability CVE-2007-2583 affects MySQL. The in_decimal::set function in item_cmpfunc.cc for MySQL versions before 5.0.40 and 5.1 before 5.1.18-beta can crash the server (denial of service) via a crafted IF clause that triggers a divide-by-zero error and a NULL pointer dereference. Connecte...

CVE-2006-3136

CVE-2006-3136 affects Nucleus CMS 3.23 and reports multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to trigger arbitrary PHP code execution by supplying a URL via the DIR_LIBS parameter in the affected endpoints: path/action.php and files under path/nucleus includi...

CVE-2006-2595

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2583. Reason: This candidate is a duplicate of CVE-2006-2583. Notes: All CVE users should reference CVE-2006-2583 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-2583

CVE-2006-2583 is a PHP remote file inclusion vulnerability in Nucleus CMS (affected: Nucleus 3.22 and earlier). It allows remote attackers to execute arbitrary PHP code by supplying a URL via the GLOBALS[DIR_LIBS] parameter in nucleus/libs/PLUGINADMIN.php. Related records note this as a reproduci...

CVE-2006-2595

CVE-2006-2595 is rejected/not used; use CVE-2006-2583 instead.

CVE-2004-2583

The CVE-2004-2583 entry describes a denial-of-service condition in SmarterTools SmarterMail (versions 1.6.1511 and 1.6.1529) where remote attackers can cause high CPU usage by opening a large number of simultaneous connections to TCP port 25. The available sources confirm the affected product and...

CVE-2005-2583

The CVE-2005-2583 entry describes a vulnerability in the Mentor ADSL-FR4II router (firmware 2.00.0111) where an undocumented web server running on TCP port 5678 can be accessed by local users to gain access. The available connected documentation confirms the affected device and the root cause as ...

CVE-2004-2583

SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service CPU consumption via a large number of simultaneous open connections to TCP port 25...