MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution

MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution source: https://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary...

MySQL < 4.0.24 / 4.1.10a Multiple Vulnerabilities

The remote host is running a version of MySQL which older than version 4.0.24 or 4.1.10a. Such versions are potentially affected by multiple issues. - MySQL uses predictable file names when creating temporary tables, which allows local users with 'CREATE TEMPORARY TABLE' privileges to overwrite...

USN-32-1: mysql vulnerabilities

Several vulnerabilities have been discovered in the MySQL database server. Lukasz Wojtow discovered a potential buffer overflow in the function mysqlrealconnect. A malicious name server could send specially crafted DNS packages which might result in execution of arbitrary code with the database...

Debian DSA-562-1 : mysql - several vulnerabilities

Several problems have been discovered in MySQL, a commonly used SQL database on Unix servers. The following problems have been identified by the Common Vulnerabilities and Exposures Project : - CAN-2004-0835 Oleksandr Byelkin noticed that ALTER TABLE ... RENAME checks CREATE/INSERT rights of the...

Mandrake Linux Security Advisory : MySQL (MDKSA-2004:119)

A number of problems have been discovered in the MySQL database server : Jeroen van Wolffelaar discovered an insecure temporary file vulnerability in the mysqlhotcopy script when using the scp method CVE-2004-0457. Oleksandr Byelkin discovered that the 'ALTER TABLE ... RENAME' would check the...

GLSA-200410-22 : MySQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200410-22 MySQL: Multiple vulnerabilities The following vulnerabilities were found and fixed in MySQL: Oleksandr Byelkin found that ALTER TABLE ... RENAME checks CREATE/INSERT rights of the old table instead of the new one...

MySQL: Multiple vulnerabilities

Background MySQL is a popular open-source, multi-threaded, multi-user SQL database server. Description The following vulnerabilities were found and fixed in MySQL: Oleksandr Byelkin found that ALTER TABLE ... RENAME checks CREATE/INSERT rights of the old table instead of the new one CAN-2004-0835...

MySQL < 4.0.21 Multiple Vulnerabilities

You are running a version of MySQL which is older than version 4.0.21. Such versions are potentially affected by two flaws : - There is an unauthorized database GRANT privilege vulnerability, which may allow an attacker to misuse the GRANT privilege it has been given and to use it against other...

Oracle MySQL < 3.23.59 Multiple Vulnerabilities (2)

Binary data 2361.prm...

Oracle MySQL < 4.0.21 Multiple Vulnerabilities (2)

Binary data 2362.prm...

[SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 562-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 562-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2004 http://www.debian.org/security/faq -...

DSA-562-2 mysql - several vulnerabilities

Bulletin has no description...

Multiple MySQL bugs

DoS, protection bypass...

[SA12783] MySQL Two Vulnerabilities

TITLE: MySQL Two Vulnerabilities SECUNIA ADVISORY ID: SA12783 VERIFY ADVISORY: http://secunia.com/advisories/12783/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From local network SOFTWARE: MySQL 4.x http://secunia.com/product/404/ MySQL 3.x http://secunia.com/product/99/...

MySQL < 3.23.59 / 4.0.21 Multiple Vulnerabilities

The remote host is running a version of the MySQL database which is older than 4.0.21 or 3.23.59. MySQL is a database which runs on both Linux/BSD and Windows platform. The remote version of this software is vulnerable to specially crafted 'ALTER TABLE SQL' query which can be exploited to bypass...

MySQL 3.x/4.x - ALTER TABLE/RENAME Forces Old Permission Checks

source: https://www.securityfocus.com/bid/11357/info MySQL is reported prone to multiple local vulnerabilities. Exploiting these issues may allow an attacker to bypass security restrictions or cause a denial-of-service condition in the application. Rportedly, an attacker can bypass certain securi...

MySQL 3.x4.x - ALTER TABLERENAME Forces Old Permission Checks

MySQL 3.x4.x - ALTER TABLERENAME Forces Old Permission Checks source: https://www.securityfocus.com/bid/11357/info MySQL is reported prone to multiple local vulnerabilities. Exploiting these issues may allow an attacker to bypass security restrictions or cause a denial-of-service condition in the...

Debian DSA-483-1 : mysql - insecure temporary file creation

Two vulnerabilities have been discovered in mysql, a common database system. Two scripts contained in the package don't create temporary files in a secure fashion. This could allow a local attacker to overwrite files with the privileges of the user invoking the MySQL server, which is often the ro...

Debian DSA-212-1 : mysql - multiple problems

While performing an audit of MySQL e-matters found several problems : signed/unsigned problem in COMTABLEDUMP Two sizes were taken as signed integers from a request and then cast to unsigned integers without checking for negative numbers. Since the resulting numbers where used for a memcpy...