4604 matches found
CVE-2013-2132
bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...
DEBIAN-CVE-2013-2132
bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...
Null pointer dereference
bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...
PYSEC-2013-30
bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...
CVE-2013-2132
bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...
CVE-2013-2132
bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...
CVE-2013-2132
The CVE-2013-2132 issue affects the pymongo driver (mongo-python-driver) up to version 2.5.2, where bson/_cbsonmodule.c decoding of an invalid DBRef could trigger a context-dependent NULL pointer dereference, causing a denial-of-service crash. This vulnerability is associated with PyMongo used in...
MongoDB权限提升漏洞(CVE-2013-4650)
CVE ID: CVE-2013-4650 MongoDB是一个高性能，开源，无模式的文档型数据库，是当前NoSql数据库中比较热门的一种 MongoDB处理权限检查存在一个安全漏洞，允许借助任意数据库中的system用户名来获得内部系统权限 0 MongoDB 2.4.0-2.4.4 MongoDB 2.5.0 厂商解决方案 MongoDB 2.4.5或2.5.1已经修复此漏洞，建议用户下载更新： http://www.mongodb.org...
MongoDB 任意代码执行漏洞(CVE-2013-4142)
CVE ID:CVE-2013-4142 MongoDB是一个高性能，开源，无模式的文档型数据库，是当前NoSql数据库中比较热门的一种 MongoDB "mongo::mongoFind"函数src/mongo/scripting/v8db.cpp在解析规则表达式时存在一个安全漏洞，允许对MongoDB数据库进行读写访问的用户执行任意代码，拥有只读访问权限的用户可使数据库崩溃。目前还不确定是否是2.2.3版本引入使用的V8 JavaScript引擎而引起的问题 0 MongoDB 2.4.0-2.4.4 厂商解决方案 MongoDB 2.4.5或2.5.1已经修复此漏洞，建议用户下载更...
MongoDB < 2.4.5 / 2.5.1 Multiple Vulnerabilities
The version of the remote MongoDB server is a version prior to version 2.4.5 / 2.5.1. It is, therefore, potentially affected by the following vulnerabilities : - A remote attacker can gain elevated privileges when authenticating as the internal system user name for arbitrary databases...
53KF-MongoDB数据库弱口令可远程直接查询库内数据
简要描述： 不需要认证，可以直接连接，操作MongoDB 详细说明： 没有做认证，导致可以直接操纵库 漏洞证明： 未做验证的ip: 60.12.147.151 221.12.88.75 122.227.58.188...
MongoDB 2.5.x/2.4.x 权限提升漏洞
CVECAN ID: CVE-2013-4650 MongoDB是用C++编写的开源文档数据库 MongoDB 2.4.x、2.5.x可允许经过身份验证的远程用户通过任意数据库内、system的用户名获取内部系统权限 0 MongoDB 2.5.x MongoDB 2.4.x 厂商补丁： MongoDB ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mongodb.org/...
Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Enterprise 1.2 Infrastructure Release Advisory
Red Hat OpenShift Enterprise 1.2 is now available which fixes several bugs and introduces feature enhancements. OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution from Red Hat, and is designed for on-premise or private cloud deployments. The OpenShift Enterprise 1.2...
Updated python-pymongo packages fix CVE-2013-2132
PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...
MGASA-2013-0201 Updated python-pymongo packages fix CVE-2013-2132
PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...
CVE-2013-4650
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...
Code injection
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...
CVE-2013-4650
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...