MySQL Enterprise Server 5.0 < 5.0.52 Multiple Vulnerabilities

The version of MySQL Enterprise Server 5.0 installed on the remote host is earlier than 5.0.52. Such versions reportedly are affected by the following issues : - Using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options can be used to overwrite system table...

Oracle MySQL Enterprise Server < 5.0.52 Multiple Vulnerabilities

Binary data 4312.prm...

MySQL服务器RENAME TABLE系统表格覆盖漏洞

BUGTRAQ ID: 26765 CVECAN ID: CVE-2007-5969 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 MySQL在某些配置情况下存在漏洞，本地攻击者可能利用此漏洞修改破坏数据表。 如果表格设置了DATA DIRECTORY和INDEX DIRECTORY选项的话，MySQL服务器在使用RENAME TABLE语句重新命名该表格时存在错误，可能允许攻击者通过某些符号链接替换所指向的文件导致覆盖系统表格信息。 MySQL AB MySQL...

MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities

Binary data 4313.prm...

MySQL Server重命名表系统表覆盖漏洞

MySQL Server是一款开放源代码的数据库。br / MySQL Server不正确处理符号链接，本地攻击者可以利用漏洞覆盖MySQL系统表导致拒绝服务攻击。br / 使用明确的DATA DIRECTORY和INDEX DIRECTORY选项使用RENAME TABLE对表进行操作。可导致通过符号链接使用替代文件来覆盖系统表信息。可造成数据库崩溃。br / MySQL AB MySQL 5.0.50 MySQL AB MySQL 5.0.49 MySQL AB MySQL 5.0.48 MySQL AB MySQL 5.0.47 MySQL AB MySQL 5.0.46 MySQ...

CVE-2007-5969

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system...

MySQL Community Server 5.0 < 5.0.51 RENAME TABLE Symlink System Table Overwrite

The version of MySQL Community Server installed on the remote host reportedly fails to check whether a file to which a symlink points exists when using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options. A local attacker may be able to leverage this issue to...

Untrusted Application or Applet May Move or Copy Arbitrary Files

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...

CONTENTCustomizer 3.1 - Dialog.php Unauthorized Access

CONTENTCustomizer 3.1 - Dialog.php Unauthorized Access source: https://www.securityfocus.com/bid/26437/info CONTENTCustomizer is prone to an unauthorized access vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker could exploit this issue to delete...

mysql DROP privilege not enforced when renaming tables

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables...

MySQL RENAME privilege escalation

DROP permission is not checked during RENAME operation...

DEBIAN-CVE-2007-2798

Stack-based buffer overflow in the renameprincipal2svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal...

Stack overflow

Stack-based buffer overflow in the renameprincipal2svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal...

krb5 kadmind buffer overflow

Stack-based buffer overflow in the renameprincipal2svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal...

CVE-2007-2852

Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during 1 delete/disinfect or 2 rename operations via a crafted directory name...

MySQL重命名表函数访问验证漏洞

MySQL是一款开放源代码的数据库程序。 MySQL由于不充分的访问控制问题，远程攻击者可以利用漏洞重命令任意表，导致拒绝服务或其他攻击。 目前没有详细漏洞细节提供。 MySQL AB MySQL 5.1.17 MySQL AB MySQL 5.1.16 MySQL AB MySQL 5.1.15 MySQL AB MySQL 5.1.14 MySQL AB MySQL 5.1.13 MySQL AB MySQL 5.1.12 MySQL AB MySQL 5.1.11 MySQL AB MySQL 5.1.10 MySQL AB MySQL 5.1.9 MySQL AB MySQL...

Code injection

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables...

CVE-2007-2691

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables...

DEBIAN-CVE-2007-1741

Multiple race conditions in suexec in Apache HTTP Server httpd 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that th...

security flaw

smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service memory and CPU exhaustion by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop...