20296 matches found
CVE-2012-5611
Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...
CVE-2012-5615
CVE-2012-5615 affects Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.x and earlier. The flaw causes different error messages and time delays depending on whether a username exists, enabling remote username enumeration. The connected Red Hat advisories (RHSA-2014-1940 and rel...
CVE-2012-5612
CVE-2012-5612 describes a heap-based buffer overflow in Oracle MySQL 5.5.19–5.5.28 and MariaDB 5.5.28a (and possibly other versions), enabling remote authenticated users to cause memory corruption, crash the server, and potentially execute arbitrary code. The vulnerability is exploited via a vari...
CVE-2012-5614
CVE-2012-5614 affects Oracle MySQL before 5.1.67 and 5.5.29, and MariaDB before 5.5.28a. The vulnerability allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT that uses UpdateXML with XML containing a large number of unique, nested elements. Connected source...
CVE-2012-5611
CVE-2012-5611 is a stack-based buffer overflow in the MySQL acl_get/user permission checking path. An authenticated remote user could crash mysqld or potentially execute arbitrary code. Affected: MySQL/MariaDB branches listed in the initial entry (e.g., 5.5.x up to 5.5.28a, 5.1.x up to 5.1.66; Ma...
[oCERT-2012-001] multiple implementations denial-of-service via MurmurHash algorithm collision
2012-001 multiple implementations denial-of-service via MurmurHash algorithm collision Description: A variety of programming languages suffer from a denial-of-service DoS condition against storage functions of key/value pairs in hash data structures, the condition can be leveraged by exploiting...
CVE-2012-6470
creationtimestamp| type| source ---|---|--- 2012-12-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23107...
Fedora 17 : mod_security-2.7.1-3.fc17 / mod_security_crs-2.2.6-3.fc17 (2012-18315)
Update to 2.7.1 - Update Core rules set to 2.2.6 - Fix build against libxml2 = 2.9 upstreamed - Add some missing directives RHBZ 569360 - Fix multipart/invalid part ruleset bypass issue CVE-2012-4528 RHBZ 867424, 867773, 867774 Note that Tenable Network Security has extracted the preceding...
Dries Buytaert Drupal Core OpenID Module Information Disclosure (CVE-2012-4554)
An information disclosure vulnerability has been reported in Dries Buytaert Drupal Core. The vulnerability is due to an input validation error when handling specially crafted OpenID responses. A remote attacker can exploit this issue by sending a specially crafted OpenID response to the target...
RIM BlackBerry PlayBook OS 1.0.8.6067 Local File Access Vulnerability
The web browser which comes as part of the RIM BlackBerry PlayBook OS can be tricked into disclosing the contents of local files through the planting of a malicious HTML file through the standard download mechanism. It should be noted that in order to exploit this issue, user interaction is...
Re: rssh security announcement
All, Today I released rssh-2.3.4, which fixes an old issue, and a new issue: On Tue, May 08, 2012 at 01:14:26PM -0500, Derek Martin wrote: rssh is a shell for restricting SSH access to a machine to only scp, sftp, or a small set of similar applications. http://www.pizzashack.org/rssh/ Henrik...
Mandriva Linux Security Advisory : libxml2 (MDVSA-2012:176)
A vulnerability was found and corrected in libxml2 : A heap-buffer overflow was found in the way libxml2 decoded certain XML entitites. A remote attacker could provide a specially crafted XML file, which once opened in an application linked against libxml would cause that application to crash, or...
Samsung / Dell Printer SNMP Backdoor
The remote host appears to be a Samsung printer, or a Dell printer manufactured by Samsung. It has a hard-coded SNMP read-write community string that allows access even when SNMP has been disabled in the printer management utility. A remote, unauthenticated attacker can exploit this to take contr...
VLC get_chunk_header Function TiVo File Remote Code Execution
The version of VLC installed on the remote host is 0.x later than 0.9.0 or 1.x earlier than or equal to 1.1.12. It, therefore, contains a double-free error in the function 'getchunkheader' in the file 'modules/demux/ty.c'. This error can be exploited by a specially crafted TiVo TY file, which cou...
UBUNTU-CVE-2012-5615
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...
[USN-1646-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-1646-1 November 30, 2012 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerabilities (USN-1652-1)
Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...
USN-1647-1 : linux-ti-omap4 vulnerabilities
Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...
USN-1645-1 : linux-ti-omap4 vulnerabilities
Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...