MySQL IF查询处理远程拒绝服务漏洞

MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 MySQL处理IF请求时存在漏洞，如果向MySQL数据库提交了恶意的IF查询请求的话，就可能触发空指针引用，导致服务器崩溃。 MySQL AB MySQL 5.0.40-debug MySQL AB MySQL 5.0.34 MySQL AB MySQL 5.0.26 MySQL AB -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://dev.mysql.com/downloads/mysql/5.0.html Gentoo ------...

Null pointer dereference

The indecimal::set function in itemcmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service crash via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference...

Oracle MySQL < 5.0.40 IF Query NULL Dereference DoS

Binary data 3985.prm...

MySQL Crafted IF Clause Divide-by-zero NULL Dereference DoS

The version of MySQL installed on the remote host reportedly is affected by a denial of service vulnerability that may be triggered with a specially crafted IF query. An attacker who can execute arbitrary SELECT statements may be able to leverage this issue to crash the affected service. C Tenabl...

CVE-2006-5761

Cross-site scripting XSS vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows remote attackers to inject arbitrary web script or HTML via the rns parameter...

CVE-2006-5761

CVE-2006-5761 describes a cross-site scripting (XSS) vulnerability in Rhadrix If-CMS, specifically in index.php where the rns parameter can be exploited to inject arbitrary web script or HTML. Affected software: Rhadrix If-CMS versions 1.01 through 2.07. Root cause is improper handling of the rns...

CVE-2006-5761

Cross-site scripting XSS vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows remote attackers to inject arbitrary web script or HTML via the rns parameter...

CVE-2006-5759

index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty 1 rns or 2 pag arguments, which reveals the path in an error message...

CVE-2006-5759

index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty 1 rns or 2 pag arguments, which reveals the path in an error message...

CVE-2006-5759

The connected PT-2006-6440 entry confirms a path-disclosure vulnerability in Rhadrix If-CMS, affecting versions 1.01–2.07. The issue arises when empty arguments rns[] or pag[] are provided, causing an error message that reveals the web server’s full filesystem path. This can aid an attacker in lo...

PT-2006-6442 · Rhadrix · Rhadrix If-Cms

Name of the Vulnerable Software and Affected Versions: Rhadrix If-CMS versions 1.01 through 2.07 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the rns parameter in the index.php...

CVE-2006-5759: Undefined Security Weakness

index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty 1 rns or 2 pag arguments, which reveals the path in an error message...

CVE-2006-5761: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows remote attackers to inject arbitrary web script or HTML via the rns parameter...

IF-CMS multiples XSS vunerabilities

vendor site: http://www.rhadrix.com/ risk : low xss = /index.php?rns=/titlescriptalertdocument.cookie/script full path array /index.php?rns= /index.php?pag= benjamin mosse & laurent gaffie http://s-a-p.ca/...

IF-CMS - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20909/info IF-CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in...

PT-2006-1096

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.54 and earlier Description: A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the...

security flaw

The dieifkernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the "noreturn" attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems...

DEBIAN-CVE-2005-0838

Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via 1 a long test value in an xsl:when tag, 2 a long test value in an xsl:if tag, or 3 a long select value in an xsl:value-of tag...

thttpd < 2.05 If-Modified-Since Header Remote Overflow

Binary data 1469.prm...

CVE-2000-0359: Undefined Security Weakness

Buffer overflow in Trivial HTTP THTTPd allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header...