UBUNTU-CVE-2011-4970

Multiple SQL injection vulnerabilities in LCG Disk Pool Manager DPM before 1.8.6, as used in EGI UDM, allow remote attackers to execute arbitrary SQL commands via the 1 rtoken variable in the dpmgetpendingreqbytoken, 2 dpmgetcprbyfullid, 3 dpmgetcprbysurl, 4 dpmgetcprbysurls, 5 dpmgetgfrbyfullid,...

CVE-2011-4970

Multiple SQL injection vulnerabilities in LCG Disk Pool Manager DPM before 1.8.6, as used in EGI UDM, allow remote attackers to execute arbitrary SQL commands via the 1 rtoken variable in the dpmgetpendingreqbytoken, 2 dpmgetcprbyfullid, 3 dpmgetcprbysurl, 4 dpmgetcprbysurls, 5 dpmgetgfrbyfullid,...

CVE-2011-4970

Multiple SQL injection vulnerabilities affect LCG Disk Pool Manager (DPM) before 1.8.6, as used in EGI UDM. The issues enable remote attackers to execute arbitrary SQL commands via numerous parameters (e.g., dpm_get_pending_req_by_token, dpm_get_cpr_by_fullid, dpm_insert_cpr_entry, dpm_update_spc...

CVE-2011-4970: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in LCG Disk Pool Manager DPM before 1.8.6, as used in EGI UDM, allow remote attackers to execute arbitrary SQL commands via the 1 rtoken variable in the dpmgetpendingreqbytoken, 2 dpmgetcprbyfullid, 3 dpmgetcprbysurl, 4 dpmgetcprbysurls, 5 dpmgetgfrbyfullid,...

CVE-2013-1962

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service file descriptor consumption via a large number of requests "to list all volumes for the particular pool."...

CVE-2013-1962

CVE-2013-1962 affects libvirt’s storage pool handling: the remoteDispatchStoragePoolListAllVolumes function in libvirt 1.0.5 may be exploited to exhaust file descriptors by sending a high volume of requests to list all volumes for a pool, causing a denial of service. Multiple advisories note fixe...

CVE-2013-1962

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service file descriptor consumption via a large number of requests "to list all volumes for the particular pool."...

LCG Disk Pool Manager SQL Injection

Name: Multiple SQL Injection vulnerabilities in Disk Pool Manager DPM Author: Adam Zabrocki Date: November 27, 2009 Yes, it's very old bug ;P Description: LCG Disk Pool Manager DPM has been developed as part of the LCG project to provide a light-weight implementation of an SRM compliant Storage...

Moderate: Red Hat Security Advisory: vdsm22 security and bug fix update

Updated vdsm22 packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5.5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...