mysql: Incomplete fix for CVE-2008-2079 / CVE-2008-4098

MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future...

Calendarix v0.8.20071118 SQL Injection

Exploit for unknown platform in category web applications ====================================== Calendarix v0.8.20071118 SQL Injection ====================================== Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et http://vulnWebSite/calday.php?op=day&catview=-2...

statcountex 3.1 - Multiple Vulnerabilities

statcountex 3.1 - Multiple Vulnerabilities Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34 Version: 3.1 Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | | | | | || ||...

openssl security update

0.9.8e-12.1 - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables 510197 - fix CVE-2009-4355 - do not leak memory when CRYPTOcleanupallexdata is called prematurely by application 546707...

I-Escorts Directory (country_escorts.php country_id) SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Vendor: www.i-escorts.co.uk TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY ? Home: WwW.xP10.ME ? ???????????????????????DEV!L'5 of SYST3M?????????????????? Err0r C0N50L3:...

I-Escorts Directory (country_escorts.php country_id) SQL Injection

Exploit for unknown platform in category web applications ================================================================================ I-Escorts Directory countryescorts.php countryid SQL Injection Vulnerability ================================================================================...

I-Escorts Directory - country_escorts.php?country_id SQL Injection

I-Escorts Directory - countryescorts.php?countryid SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Vendor: www.i-escorts.co.uk TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY ? Home: WwW.xP10.ME ? ???????????????????????DEV!L'5 of SYST3M?????????????????? Err...

Oracle ctxsys.drvxtabc.create_tables Evil Cursor Exploit

Exploit for unknown platform in category local exploits ======================================================== Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit ======================================================== Title: Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit CVE-ID:...

CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...

CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...

DEBIAN-CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...

CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...

[SECURITY] Fedora 11 Update: rubygem-activerecord-2.3.2-2.fc11

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

PT-2009-4931 · Microsoft · Gdi+ +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office XP SP3 Description: The issue arises from the improper handling of malformed objects in Office Art Property Tables by GDI+ in Microsoft Office, allowing remote attackers to execute arbitrary code via a crafted Office document...

SuSE9 Security Update : PostgreSQL (YOU Patch Number 11509)

This update fixes two vulnerabilities that affect the backend server and can only be exploited by authenticated users to cause a denial-of-service, or maybe to access other tables/databases without authentication. CVE-2007-0555 CVE-2007-0556 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

mysql: privilege escalation via DATA/INDEX DIRECTORY directives

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory,...

metasploit autopwn with mysql simple version of the [shadow-T-write]-vulnerability warning-the black bar safety net

Before according to the foreign method, although able to successfully run the autopwn,but set up ash is often in trouble right now according to their own summary of the simple method, stick out a detailed set up steps. First, we find creating a data table of the sql file...

PT-2009-2907 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to an integer overflow in the Embedded OpenType EOT Font Engine, allowing remote attackers to execute arbitrary code via a crafted name table. A remote co...

RIP Poisoning Routing Table Modification (Adjacent Network)

It was possible to poison the remote host routing tables through the RIP protocol. An attacker may use this to hijack network connections. Several RIP agents reject routes that are not sent by a neighbor, so this flaw may not be exploitable from a non-adjacent network. C Tenable Network Security,...

CVE-2008-6760

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cartsave.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a userid parameter...