FrontBase关系型数据库服务器过程缓冲区溢出漏洞

FrontBase是一款企业级的关系型数据库程序。 FrontBase处理'CREATE PROCEDURE' SQL请求存在缓冲区溢出，远程攻击者可以利用此漏洞以应用程序进程权限执行任意指令。 如果用户可以建立超长名的"create procedure"请求，可触发溢出，根据系统的不同可获得应用程序进程权限或系统权限。 FrontBase 4.2.7 目前没有详细解决方案提供： http://www.frontbase.com/ create procedure...

[SECURITY] Fedora Core 5 Update: postgresql-8.1.7-1.fc5

PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...

IBM DB2 Administration Server Detection

The remote host is running an IBM DB2 Administration Server. DB2 is an enterprise relational database management system, and the Administration Server is used by DB2 to administer databases across a network. C Tenable, Inc. include"compat.inc"; if description scriptid22016; scriptversion"1.31";...

security flaw

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysqlrealescape function is...

postgresql, rh security update

CentOS Errata and Security Advisory CESA-2005:433 Updated postgresql packages that fix several security vulnerabilities and risks of data loss are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...