Sybase SQL-Anywhere Database Server Detection

Binary data 5148.prm...

Firebird 1.0 - Remote Database Name Buffer Overrun

source: https://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling database names. A remote attacker may exploit this...

Firebird 1.0 - Remote Database Name Buffer Overrun

Firebird 1.0 - Remote Database Name Buffer Overrun source: https://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling...

CVE-2003-0938

vos24u.c in SAP database server SAP DB 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure...

CVE-2003-0939

eo420GetStringFromVarPart in veo420.c for SAP database server SAP DB 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver aka serv.exe process on TCP port 7269, which prevents the server from NULL terminating the...

CVE-2003-0938

vos24u.c in SAP database server SAP DB 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure...

CVE-2003-0939

eo420GetStringFromVarPart in veo420.c for SAP database server SAP DB 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver aka serv.exe process on TCP port 7269, which prevents the server from NULL terminating the...

CVE-2003-0939: Undefined Security Weakness

eo420GetStringFromVarPart in veo420.c for SAP database server SAP DB 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver aka serv.exe process on TCP port 7269, which prevents the server from NULL terminating the...

CVE-2003-0938: Undefined Security Weakness

vos24u.c in SAP database server SAP DB 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure...

Oracle command-line program buffer overflow in argument handling

Overview A buffer overflow in some command-line utilities supplied with the Oracle Database Server could allow a local user to gain the privileges of the oracle system user. Description The Oracle 9 i Database Server package includes the oracle and oracleO command-line client programs to connect ...

Xpressions Interactive - Multiple SQL Injections

source: https://www.securityfocus.com/bid/7804/info Several software products maintained by Xpressions Interactive are prone to SQL injection attacks. The vulnerability exists in the login.asp page. Specifically, user-supplied input is not sufficiently sanitized of malicious SQL queries. An...

CVE-2003-0222

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter...

CVE-2003-0222

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter...

CVE-2003-0222

CVE-2003-0222 : A stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows an attacker to execute arbitrary code via a CREATE DATABASE LINK query containing a connect string with a long USING parameter. The vulnerability requires a valid databa...

CVE-2003-0222: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter...

CVE-2002-0679

CVE-2002-0679 concerns the CDE ToolTalk RPC database server, rpc.ttdbserverd, which contains a heap buffer overflow vulnerability triggered by an argument to the _TT_CREATE_FILE() procedure. A remote attacker could exploit this to execute arbitrary code or cause a denial of service, typically run...

CVE-2002-0678

CVE-2002-0678 relates to the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/CERT CORE disclosures describe two vulnerabilities: (1) _TT_ISCLOSE range-check flaw permitting memory overwriting of the process when a local or remote client calls _TT_ISCLOSE; (2) _TT_TRANSACTION/log_f...

CVE-2002-0571

CVE-2002-0571 affects Oracle9i database server 9.0.1.x and allows local users to access restricted data via a SQL query that uses ANSI outer join syntax. The underlying cause is not detailed in the provided documents, and there are no explicit remediation steps or exploit details in the connected...

CVE-2002-0571: Undefined Security Weakness

Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax...

CVE-2002-0965: Undefined Security Weakness

Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICENAME parameter, which is not properly handled when writing an error message to a log file...