CVE-2013-2132

The CVE-2013-2132 issue affects the pymongo driver (mongo-python-driver) up to version 2.5.2, where bson/_cbsonmodule.c decoding of an invalid DBRef could trigger a context-dependent NULL pointer dereference, causing a denial-of-service crash. This vulnerability is associated with PyMongo used in...

MongoDB权限提升漏洞(CVE-2013-4650)

CVE ID: CVE-2013-4650 MongoDB是一个高性能，开源，无模式的文档型数据库，是当前NoSql数据库中比较热门的一种 MongoDB处理权限检查存在一个安全漏洞，允许借助任意数据库中的system用户名来获得内部系统权限 0 MongoDB 2.4.0-2.4.4 MongoDB 2.5.0 厂商解决方案 MongoDB 2.4.5或2.5.1已经修复此漏洞，建议用户下载更新： http://www.mongodb.org...

MongoDB 任意代码执行漏洞(CVE-2013-4142)

CVE ID:CVE-2013-4142 MongoDB是一个高性能，开源，无模式的文档型数据库，是当前NoSql数据库中比较热门的一种 MongoDB "mongo::mongoFind"函数src/mongo/scripting/v8db.cpp在解析规则表达式时存在一个安全漏洞，允许对MongoDB数据库进行读写访问的用户执行任意代码，拥有只读访问权限的用户可使数据库崩溃。目前还不确定是否是2.2.3版本引入使用的V8 JavaScript引擎而引起的问题 0 MongoDB 2.4.0-2.4.4 厂商解决方案 MongoDB 2.4.5或2.5.1已经修复此漏洞，建议用户下载更...

MongoDB < 2.4.5 / 2.5.1 Multiple Vulnerabilities

The version of the remote MongoDB server is a version prior to version 2.4.5 / 2.5.1. It is, therefore, potentially affected by the following vulnerabilities : - A remote attacker can gain elevated privileges when authenticating as the internal system user name for arbitrary databases...

53KF-MongoDB数据库弱口令可远程直接查询库内数据

简要描述： 不需要认证，可以直接连接，操作MongoDB 详细说明： 没有做认证，导致可以直接操纵库 漏洞证明： 未做验证的ip: 60.12.147.151 221.12.88.75 122.227.58.188...

MongoDB 2.5.x/2.4.x 权限提升漏洞

CVECAN ID: CVE-2013-4650 MongoDB是用C++编写的开源文档数据库 MongoDB 2.4.x、2.5.x可允许经过身份验证的远程用户通过任意数据库内、system的用户名获取内部系统权限 0 MongoDB 2.5.x MongoDB 2.4.x 厂商补丁： MongoDB ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mongodb.org/...

Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Enterprise 1.2 Infrastructure Release Advisory

Red Hat OpenShift Enterprise 1.2 is now available which fixes several bugs and introduces feature enhancements. OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution from Red Hat, and is designed for on-premise or private cloud deployments. The OpenShift Enterprise 1.2...

Updated python-pymongo packages fix CVE-2013-2132

PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...

MGASA-2013-0201 Updated python-pymongo packages fix CVE-2013-2132

PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...

CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

Code injection

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

UBUNTU-CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

CVE-2013-4650

Removed by vendor...

CVE-2013-4650

MongoDB versions affected are 2.4.x before 2.4.5 and 2.5.x before 2.5.1. The issue allows remote authenticated users to obtain internal system privileges by using the __system username in an arbitrary database. This is a privilege-escalation vulnerability with impact as described in the sources. ...

CVE-2013-4650: Undefined Security Weakness

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

USN-1897-1: PyMongo vulnerability

Jibbers McGee discovered that PyMongo incorrectly handled certain invalid DBRefs. An attacker could use this issue to cause PyMongo to crash, resulting in a denial of service...

DSA-2705-1 pymongo - denial of service

Bulletin has no description...

Debian Security Advisory DSA 2705-1 (pymongo - denial of service)

Jibbers McGee discovered that PyMongo, a high-performance schema-free document-oriented data store, is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash. The oldstable distribution squeeze is not affected by this issue...