Oracle MySQL 4.1 < 4.1.24 MyISAM Table Privilege Check Bypass

Binary data 4498.prm...

CVE-2008-2079

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory,...

CVE-2008-2079

CVE-2008-2079 affects MySQL 4.1.x &lt;4.1.24, 5.0.x &lt;5.0.60, 5.1.x &lt;5.1.24, and 6.0.x

CVE-2006-5428

rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a displaygetrequesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information ticket data via a direct request...

CVE-2006-0616

CVE-2006-0616 : Unspecified vulnerability in Sun Java JDK/JRE 5.0 Update 4 and earlier allows a remote attacker to bypass the Java sandbox and gain privileges through the reflection APIs (the so‑called “fourth issue”). Exploitation details are not provided in the documents, but multiple sources d...

CVE-2005-3974

Drupal 4.5.0–4.5.5 and 4.6.0–4.6.3 on PHP5 do not correctly enforce user privileges, allowing remote attackers to bypass the access user profiles permission (CVE-2005-3974). The advisories note a fix in 4.6.3 (and related Debian updates in DSA-958-1), with older fixed versions for sid/stable tree...

CVE-2005-3974

Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission...