904 matches found
Ubuntu Update for MySQL vulnerabilities USN-950-1
Ubuntu Update for Linux kernel vulnerabilities USN-950-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9501.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for MySQL vulnerabilities USN-950-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Debian: Security Advisory (DSA-707-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-559-1: MySQL vulnerabilities
Joe Gallo and Artem Russakovskii discovered that the InnoDB engine in MySQL did not properly perform input validation. An authenticated user could use a crafted CONTAINS statement to cause a denial of service. CVE-2007-5925 It was discovered that under certain conditions MySQL could be made to...
Ubuntu 5.10 / 6.06 LTS : mysql-dfsg-4.1, mysql-dfsg-5.0 vulnerability (USN-303-1)
A SQL injection vulnerability has been discovered when using less popular multibyte encodings such as SJIS, or BIG5 which contain valid multibyte characters that end with the byte 0x5c the representation of the backslash character ''''''. Note that Tenable Network Security has extracted the...
USN-528-1: MySQL vulnerabilities
Neil Kettle discovered that MySQL could be made to dereference a NULL pointer and divide by zero. An authenticated user could exploit this with a crafted IF clause, leading to a denial of service. CVE-2007-2583 Victoria Reznichenko discovered that MySQL did not always require the DROP privilege. ...
EUVD-2007-3981
The 1 MySQL and 2 MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safemode and openbasedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE...
Oracle MySQL < 5.1.18 Multiple Vulnerabilities
Binary data 3993.prm...
Ubuntu 4.10 : mysql-dfsg vulnerabilities (USN-32-1)
Several vulnerabilities have been discovered in the MySQL database server. Lukasz Wojtow discovered a potential buffer overflow in the function mysqlrealconnect. A malicious name server could send specially crafted DNS packages which might result in execution of arbitrary code with the database...
MySQL < 4.0.24 / 4.1.10a Multiple Vulnerabilities
The remote host is running a version of MySQL which older than version 4.0.24 or 4.1.10a. Such versions are potentially affected by multiple issues. - MySQL uses predictable file names when creating temporary tables, which allows local users with 'CREATE TEMPORARY TABLE' privileges to overwrite...
MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution
source: https://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary file-creation vulnerability. Reports indicate that an attacker with...
MySQL 4.x - CREATE FUNCTION mysql.func Table Arbitrary Library Injection
source: https://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary file-creation vulnerability. Reports indicate that an attacker with...
MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution
MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution source: https://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary...
Oracle MySQL Multiple Vulnerabilities
Binary data 2696.prm...
USN-32-1: mysql vulnerabilities
Several vulnerabilities have been discovered in the MySQL database server. Lukasz Wojtow discovered a potential buffer overflow in the function mysqlrealconnect. A malicious name server could send specially crafted DNS packages which might result in execution of arbitrary code with the database...
Debian DSA-562-1 : mysql - several vulnerabilities
Several problems have been discovered in MySQL, a commonly used SQL database on Unix servers. The following problems have been identified by the Common Vulnerabilities and Exposures Project : - CAN-2004-0835 Oleksandr Byelkin noticed that ALTER TABLE ... RENAME checks CREATE/INSERT rights of the...
Mandrake Linux Security Advisory : MySQL (MDKSA-2004:119)
A number of problems have been discovered in the MySQL database server : Jeroen van Wolffelaar discovered an insecure temporary file vulnerability in the mysqlhotcopy script when using the scp method CVE-2004-0457. Oleksandr Byelkin discovered that the 'ALTER TABLE ... RENAME' would check the...
GLSA-200410-22 : MySQL: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200410-22 MySQL: Multiple vulnerabilities The following vulnerabilities were found and fixed in MySQL: Oleksandr Byelkin found that ALTER TABLE ... RENAME checks CREATE/INSERT rights of the old table instead of the new one...
MySQL: Multiple vulnerabilities
Background MySQL is a popular open-source, multi-threaded, multi-user SQL database server. Description The following vulnerabilities were found and fixed in MySQL: Oleksandr Byelkin found that ALTER TABLE ... RENAME checks CREATE/INSERT rights of the old table instead of the new one CAN-2004-0835...
MySQL < 4.0.21 Multiple Vulnerabilities
You are running a version of MySQL which is older than version 4.0.21. Such versions are potentially affected by two flaws : - There is an unauthorized database GRANT privilege vulnerability, which may allow an attacker to misuse the GRANT privilege it has been given and to use it against other...
Oracle MySQL < 3.23.59 Multiple Vulnerabilities (2)
Binary data 2361.prm...