4334 matches found
Important: Red Hat Security Advisory: mysql security update
Updated mysql packages that fix several vulnerabilities are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. This update fixes several security risks in the MySQL server...
security flaw
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack...
Description of the critical update for Windows Firewall "My Network (subnet) only" scoping in Windows XP Service Pack 2
Description of the critical update for Windows Firewall "My Network subnet only" scoping in Windows XP Service Pack 2 Article ID : 886185 Last Review : December 18, 2004 Revision : 2.0 On this Page SUMMARY SYMPTOMS CAUSE RESOLUTION MORE INFORMATION SUMMARY This article describes Critical Update f...
CVE-2004-0125
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table...
PT-2004-1690 · Php · Php
Name of the Vulnerable Software and Affected Versions: PHP versions 4.3.7 and prior PHP versions 5.0.0RC3 and prior Description: The issue allows remote attackers to execute arbitrary code under certain conditions, such as when register globals is enabled. This is achieved by triggering a memory...
CVE-2004-0125
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table...
CVE-2004-0125
The CVE-2004-0125 issue affects the FreeBSD jail subsystem (jail(2)) in FreeBSD 4. x prior to 4.10-RELEASE. A programming error failed to verify that routing-table manipulation originated from a jailed process, allowing a privileged jailed process to modify the host’s routing tables. This could c...
FreeBSD-SA-04:12.jailroute
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:12.jailroute Security Advisory The FreeBSD Project Topic: Jailed processes can manipulate host routing tables Category: core Module: kernel Announced: 2004-06-...
FreeBSD-SA-04:12.jailroute
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:12.jailroute Security Advisory The FreeBSD Project Topic: Jailed processes can manipulate host routing tables Category: core Module: kernel Announced:...
jailed processes can manipulate host routing tables
A programming error resulting in a failure to verify that an attempt to manipulate routing tables originated from a non-jailed process. Jailed processes running with superuser privileges could modify host routing tables. This could result in a variety of consequences including packets being sent...
phpGroupWare 0.9.14 - 'Tables_Update.Inc.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/12074/info phpGroupWare is prone to a remote file include vulnerability, potentially allowing the execution of malicious PHP code. This would occur in the context of the affected web server. The tablesupdate.inc.php script contains the following include...
phpGroupWare 0.9.14 - Tables_Update.Inc.php Remote File Inclusion
phpGroupWare 0.9.14 - TablesUpdate.Inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/12074/info phpGroupWare is prone to a remote file include vulnerability, potentially allowing the execution of malicious PHP code. This would occur in the context of the affected web server...
mysql -- ALTER MERGE denial of service vulnerability
Dean Ellis reported a denial of service vulnerability in the MySQL server: Multiple threads ALTERing the same or different MERGE tables to change the UNION eventually crash the server or hang the individual threads. Note that a script demonstrating the problem is included in the MySQL bug report...
CVE-2002-1124
Purity (1-16), a game for nerds, is affected by multiple buffer overflows that can let local users gain privileges and modify high scores tables. Root cause: overflow conditions in purity 1-16. Impact: local privilege escalation and integrity/availability of high score data. Remediation: apply th...
CVE-1999-1254
Technical details (affected software, vulnerability specifics, and remediation) are not publicly provided in the connected documents. Monitor for updates.
PT-2001-1575 · 3Com +1 · 3Com Airconnect Ap-4111 +1
Name of the Vulnerable Software and Affected Versions: 3Com AirConnect AP-4111 Symbol 41X1 Access Point Description: The issue allows remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only. This can be done via the dot11WEPDefaultKeyValue in...
CVE-2000-0379
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so...
CVE-2000-0379
The CVE-2000-0379 entry concerns the Netopia R9100 router, where authenticated users can modify SNMP tables even when the administrator has disabled this capability. According to the NVD entry, the vulnerability has a CVSS base score of 3.6 (LOW) with LOCAL attack vector, low complexity, and no a...