1999 matches found
[Full-Disclosure] [SECURITY] [DSA-335-1] New mantis packages fix insecure file permissions
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 335-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 28th, 2003 http://www.debian.org/security/faq -...
DSA-335 mantis - incorrect permissions
Bulletin has no description...
CVE-2003-0265
The CVE-2003-0265 entry describes a race condition in SAP database’s SDBINST (version 7.3.0.29) that creates critical files with world-writable permissions before initializing the setuid bits. This allows local attackers to modify files before permissions are changed, potentially gaining root pri...
MPCSoftWeb 1.0 - Database Disclosure
MPCSoftWeb 1.0 - Database Disclosure source: https://www.securityfocus.com/bid/7390/info MPCSoftWeb does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information such as administrative credentials for the...
CVE-2003-0197
CVE-2003-0197 affects Borland Interbase Database 6.x. A buffer overflow in gds_lock_mgr allows local users to gain privileges by supplying a long ISC_LOCK_ENV (INTERBASE_LOCK) environment variable. The issue enables local privilege escalation and can impact confidentiality, integrity, and availab...
SRT2003-04-02-1735 - Progress PROSTARTUP root owned file read
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
CVE-2002-0965
CVE-2002-0965 describes a buffer overflow in Oracle’s TNS Listener triggered by a long SERVICE_NAME when writing an error to a log. Affected products include Oracle 9i on Windows and Oracle 8i/VM environments. The vulnerability could allow an unauthenticated local user with TNS Listener privilege...
CVE-2002-0536
PHPGroupware 0.9.12 and earlier, when running with the magicquotesgpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack...
CVE-2003-0025
Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain privileges via certain database functions such as checkprefs in db.pgsql, as demonstrated using mailbox.php3...
CVE-2002-1809
The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database...
CVE-2002-2301
Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database...
ora-isqlplus.txt
NGSSoftware Insight Security Research Advisory Name: Oracle iSQLPlus buffer overflow Systems: Oracle Database 9i R1,2 on all operating systems Severity: High Risk Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Advisory URL:...
Lotus Domino 5.0.8-9 - Non-Existent NSF Database Banner Information Disclosure
source: https://www.securityfocus.com/bid/6128/info Lotus Domino reportedly discloses sensitive banner information when a non-existent NSF database is requested. This may allow a remote attacker to discover information about the layout of the filesystem. This issue is present on Lotus Domino Serv...
CVE-2002-0858
catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges...
CVE-2002-0943
CVE-2002-0943 describes a vulnerability where MetaCart2.sql stores the user database (metacart.mdb) under the web document root without access controls, enabling remote attackers to obtain sensitive information (passwords, credit card numbers) via direct request. The root cause is lack of access ...
Microsoft Windows SQL Server allows arbitrary queries to be executed via "xp_execresultset" extended procedure
Overview MS SQL Server contains an extended stored procedure with inappropriate permission settings. Description Microsoft SQL Server 7.0 and Microsoft SQL Server 2000 contain an extended stored procedure, xpexecresultset , that permits an unprivileged user of a database to gain administrative...
CVE-2002-0644
Buffer overflow in several Database Consistency Checkers DBCCs for Microsoft SQL Server 2000 and Microsoft Desktop Engine MSDE 2000 allows members of the dbowner and dbddladmin roles to execute arbitrary code...
CVE-2001-1348
TWIG 2.6.2 and earlier are vulnerable to SQL injection via the id parameter, allowing remote attackers to perform unauthorized database operations. The issue is documented against TWIG, with a remote, network-exploitable vector and potential data integrity/ confidentiality impacts. No remediation...