FreeBSD Ports: p5-DBI, p5-DBI-137

The remote host is missing an update to the system as announced in the referenced advisory. VID 8cfb6f42-d2b0-11da-a672-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: p5-DBI, p5-DBI-137

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.1 security and enhancement update

Red Hat Application Stack v2.1 is now available. This update fixes various security issues and adds several enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Red Hat Application Stack is an integrated open source application...

Oracle 10g - KUPV$FT.ATTACH_JOB Grant/Revoke dba Permission

!/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: https://www.securityfocus.com/bid/16294 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE...

Oracle 10g KUPV$FT.ATTACH_JOB Grant/Revoke dba Permission Exploit

No description provided by source. !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16294 AUTHOR: Andrea "bunker" Purificato...

Oracle 9i10g - DBMS_EXPORT_EXTENSION SQL Injection

Oracle 9i10g - DBMSEXPORTEXTENSION SQL Injection !/usr/bin/perl Remote Oracle dbmsexportextension exploit any version Grant or revoke dba permission to unprivileged user Tested on Oracle 10g - Release 10.2.0.1.0 Oracle 9i - Release 9.2.0.2.0 REF: https://www.securityfocus.com/bid/17699 AUTHOR:...

Oracle 9i/10g DBMS_EXPORT_EXTENSION SQL Injection Exploit

Exploit for multiple platform in category remote exploits ========================================================= Oracle 9i/10g DBMSEXPORTEXTENSION SQL Injection Exploit ========================================================= !/usr/bin/perl Remote Oracle dbmsexportextension exploit any versio...

CVSTrac 2.0.0 Post-Attack Database Resurrection DoS Exploit

No description provided by source. cvstrack-resurrect.pl -- CVSTrac Post-Attack Database Resurrection Copyright c 2007 Ralf S. Engelschall [email protected] use DBI; requires OpenPKG perl-dbi use DBD::SQLite; requires OpenPKG perl-dbi, perl-dbi::withdbdsqlite=yes use DBIx::Simple; requires...

FreeBSD : p5-DBI -- insecure temporary file creation vulnerability (8cfb6f42-d2b0-11da-a672-000e0c2e438a)

Javier Fernandez-Sanguino Pena reports : The DBI library, the Perl5 database interface, creates a temporary PID file in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by the person executing the parts of the library. %NASLMINLEVEL 70300 C Tenable...

Ubuntu 4.10 : libdbi-perl vulnerabilities (USN-70-1)

Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered that the module DBI::ProxyServer in Perl's DBI library created a PID file in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking...

Fedora Core 3 : perl-DBI-1.40-6.fc3 (2005-841)

Old and low priority security update that we forgot to push a while ago. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2005-0077

The DBI library libdbi-perl for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file...

CVE-2005-0077

The DBI library libdbi-perl for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file...

CVE-2005-0077

The DBI library libdbi-perl for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file...

exp3.pl.txt

!/usr/bin/perl Mysql CREATE FUNCTION libc arbitrary code execution. Author: Stefano Di Paola Vulnerable: Mysql 0; use constant PASS = "USEYOURPASSHERE"; Connect to the database. my $dbh = DBI-connect"DBI:mysql:database=test;host=localhost", "root", PASS ,'RaiseError' = 1; This is the opcode point...

RHEL 4 : perl-DBI (RHSA-2005:072)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:072 advisory. DBI is a database access Application Programming Interface API for the Perl programming language. The Debian Security Audit Project discovered that th...

Low: Red Hat Security Advisory: perl-DBI security update

An updated perl-DBI package that fixes a temporary file flaw in DBI::ProxyServer is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. DBI is a database access Application Programming Interface API for the...

security flaw

The DBI library libdbi-perl for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file...

GLSA-200501-38 : Perl: rmtree and DBI tmpfile vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-38 Perl: rmtree and DBI tmpfile vulnerabilities Javier Fernandez-Sanguino Pena discovered that the DBI library creates temporary files in an insecure, predictable way CAN-2005-0077. Paul Szabo found out that...

Mandrake Linux Security Advisory : perl-DBI (MDKSA-2005:030)

Javier Fernandez-Sanguino Pena disovered the perl5 DBI library created a temporary PID file in an insecure manner, which could be exploited by a malicious user to overwrite arbitrary files owned by the user executing the parts of the library. The updated packages have been patched to prevent thes...