CVE-2005-1887

CVE-2005-1887 affects Sun Solaris 10 libc.so.1/libc and libproject components. Connected documents indicate Solaris 10 SPARC patch 119689-07 and x86 patch 118345-13 address the issue; patches target libc.so.1. The vulnerability is described as allowing local privilege escalation, with local acces...

CVE-2005-1887: Undefined Security Weakness

Unknown vulnerability in the Sun Solaris C library libc and libproject in Solaris 10 allows local users to gain privileges...

Sun Solaris libc privilege escalation

No description provided...

CVE-2005-0709

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, onexit, and exit...

CVE-2005-0709

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, onexit, and exit...

Low: Red Hat Security Advisory: glibc security update

Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. Flaws in the catchsegv and glibcbug scrip...

Debian DSA-707-1 : mysql - several vulnerabilities

Several vulnerabilities have been discovered in MySQL, a popular database. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-0957 Sergei Golubchik discovered a problem in the access handling for similar named databases. If a user is granted privileges...

CVE-2002-1616: Undefined Security Weakness

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via 1 su, 2 chsh, 3 passwd, 4 chfn, 5 dxchpwd, and 6 libc...

HP-UX PHCO_16629 : s700_800 11.00 libc cumulative patch

s700800 11.00 libc cumulative patch : rpc.pcnfsd has an error in its use of the spool directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO16629. The text itself is copyright C Hewlett-Packard...

GLSA-200503-19 : MySQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200503-19 MySQL: Multiple vulnerabilities MySQL fails to properly validate input for authenticated users with INSERT and DELETE privileges CAN-2005-0709 and CAN-2005-0710. Furthermore MySQL uses predictable filenames when creating...

exp3.pl.txt

!/usr/bin/perl Mysql CREATE FUNCTION libc arbitrary code execution. Author: Stefano Di Paola Vulnerable: Mysql 0; use constant PASS = "USEYOURPASSHERE"; Connect to the database. my $dbh = DBI-connect"DBI:mysql:database=test;host=localhost", "root", PASS ,'RaiseError' = 1; This is the opcode point...

CVE-2005-0709

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, onexit, and exit...

CVE-2005-0709: Improper Control of Generation of Code

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, onexit, and exit...

HP-UX PHCO_28481 : s700_800 11.11 cumulative 10.20 libc compatibility support

s700800 11.11 cumulative 10.20 libc compatibility support : The remote HP-UX host is affected by multiple vulnerabilities : - Potential buffer overflow in xdrmemgetbytes and related functions. HPSBUX00252 SSRT2439 - Potential buffer overflow in XDR library. HPSBUX00215 SSRT2336 %NASLMINLEVEL 7030...

HP-UX PHCO_29190 : s700_800 11.04 (VVOS) libc cumulative patch

s700800 11.04 VVOS libc cumulative patch : The remote HP-UX host is affected by multiple vulnerabilities : - calloc miscalculates the memory requirements. HPSBUX00310 SSRT2341 - Potential buffer overflow in rexec1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patc...

HP-UX PHCO_28480 : s700_800 11.00 cumulative 10.20 libc compatibility support

s700800 11.00 cumulative 10.20 libc compatibility support : The remote HP-UX host is affected by multiple vulnerabilities : - Potential buffer overflow in XDR library. HPSBUX00215 SSRT2336 - Potential buffer overflow in xdrmemgetbytes and related functions. HPSBUX00252 SSRT2439 %NASLMINLEVEL 7030...

HP-UX PHCO_17601 : s700_800 11.00 libc cumulative patch

s700800 11.00 libc cumulative patch : Security Vulnerability during ftp operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO17601. The text itself is copyright C Hewlett-Packard Development Company,...

CVE-2002-1476

The CVE-2002-1476 entry describes a buffer overflow in the libc setlocale implementation on NetBSD 1.4.x–1.6 (and possibly other OSes) when LC_ALL is used with a locale string that contains more than 6 elements. This enables a local attacker to potentially execute arbitrary code via the compromis...

CVE-2002-1265

CVE-2002-1265 is evidenced in HP-UX RPC-related DoS advisories; OpenVAS/Nessus entries (PHNE_30091/30092/30093/30094, and PHKL_31500) reference CVE-2002-1265 as the RPC/HP-UX RPC DoS issue. Patches exist (HPSBUX01020 SSRT2384, etc.; PHKL_31500 consolidates fixes) addressing remote DoS via HP-UX R...

CVE-2002-1146: Undefined Security Weakness

The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary "read buffer...