CVE-2008-4769

CVE-2008-4769 : WordPress is vulnerable to a directory traversal in the get_category_template function (wp-includes/theme.php). Affected versions include WordPress 2.3.3 and earlier, and 2.5, where an attacker can remotely include and possibly execute arbitrary PHP files via the cat parameter in ...

CVE-2008-4769

Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...

Gentoo Security Advisory GLSA 200801-15 (postgresql)

The remote host is missing updates announced in advisory GLSA 200801-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-4769

creationtimestamp| type| source ---|---|--- 2008-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31670...

openSUSE 10 Security Update : postgresql (postgresql-4955)

This version update to 8.2.6 fixes among other things several security issues : - Index Functions Privilege Escalation: CVE-2007-6600 - Regular Expression Denial-of-Service: CVE-2007-4772, CVE-2007-6067, CVE-2007-4769 - DBLink Privilege Escalation: CVE-2007-6601 %NASLMINLEVEL 70300 C Tenable...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 4962)

This version update to 7.4.19 fixes among other things several security issues : - Index Functions Privilege Escalation: CVE-2007-6600 - Regular Expression Denial-of-Service: CVE-2007-4772 / CVE-2007-6067 / CVE-2007-4769 - DBLink Privilege Escalation: CVE-2007-6601 %NASLMINLEVEL 70300 C Tenable...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix several security issues are now available for Red Hat Application Stack v1 and v2. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS...

GLSA-200801-15 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-15 PostgreSQL: Multiple vulnerabilities If using the 'expression indexes' feature, PostgreSQL executes index functions as the superuser during VACUUM and ANALYZE instead of the table owner, and allows SET ROLE and SET SESSI...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : postgresql vulnerabilities (USN-568-1)

Nico Leidecker discovered that PostgreSQL did not properly restrict dblink functions. An authenticated user could exploit this flaw to access arbitrary accounts and execute arbitrary SQL queries. CVE-2007-3278, CVE-2007-6601 It was discovered that the TCL regular expression parser used by...

Debian DSA-1463-1 : postgresql-7.4 - several vulnerabilities

Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3278 It was discovered that the DBLink module performed insufficient credential validation. This iss...

[SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1463-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 14, 2008 http://www.debian.org/security/faq -...

RHEL 4 / 5 : postgresql (RHSA-2008:0038)

Updated postgresql packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS. Th...

Fedora 8 : postgresql-8.2.6-1.fc8 (2008-0478)

Mon Jan 7 2008 Tom Lane 8.2.6-1 - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 - Make initscript and pam config files be installed unconditionally; seems new buildroots don't necessarily have those directories in place Note that...

DSA-1463-1 postgresql-7.4 - several

Bulletin has no description...

[SECURITY] [DSA 1460-1] New postgresql-8.1 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1460-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 13, 2008 http://www.debian.org/security/faq -...

postgresql security update

CentOS Errata and Security Advisory CESA-2008:0038 Updated postgresql packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...

Moderate: postgresql security update

7.4.19-1.el46.1 - Update to PostgreSQL 7.4.19 to fix CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 Resolves: 427135...

CVE-2007-4769

Vulnerability summary (CVE-2007-4769) The Tcl regular expression parser used by PostgreSQL versions affected by TCL TclRegex before 8.4.17 contains an out-of-bounds backref error that can be triggered by an authenticated remote user, leading to a backend crash (DoS). Impacted versions (per descri...

CVE-2006-4769

The CVE-2006-4769 entry describes a PHP remote file inclusion in p4CMS 1.05, where abf_js.php is vulnerable and an attacker can execute arbitrary PHP by supplying a URL in the abs_pfad parameter. Affected software is p4CMS 1.05; the vulnerability enables remote code execution with assumed network...

CVE-2005-4769

CVE-2005-4769: Affected software is Belchior Foundry vCard PRO 3.1; vulnerability resides in addrbook.php where SQL injection via the addr_id parameter allows remote execution of arbitrary SQL commands. The core issue is improper input handling leading to database query manipulation. No explicit ...