MySQL Enterprise Server 5.0 < 5.0.52 Multiple Vulnerabilities

The version of MySQL Enterprise Server 5.0 installed on the remote host is earlier than 5.0.52. Such versions reportedly are affected by the following issues : - Using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options can be used to overwrite system table...

Oracle MySQL Enterprise Server < 5.0.52 Multiple Vulnerabilities

Binary data 4312.prm...

SUSE Linux ISC BIND “named” GSS-TSIG请求远程拒绝服务漏洞

BUGTRAQ ID: 26076 SuSE Linux Enterprise Server是在企业环境中使用的开放源码计算平台。 GSS-TSIG是Microsoft Windows系统用于动态请求DNS更新的机制。当named接收到GSS-TSIG请求时，需要加载libgssapi库负责安全密钥交换。如果libgssapi无法正确初始化的话，就会终止正在运行的named进程。尤其是当在chroot环境中运行named的时候，libgssapi就会终止进程，因为无法访问机制配置文件。 Novell SUSE Linux Enterprise Server 10 Service Pack...

Default configuration

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

CVE-2007-5471 affects libgssapi before 0.6-13.7 used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP1. The library terminates on an initialization error, allowing remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. The issue probably affects othe...

Adobe Connect企业服务器信息泄露漏洞

BUGTRAQ ID: 25640 CVECAN ID: CVE-2007-4651 Adobe Connect之前名为Macromedia Breeze，是企业级的网络通讯解决方案。 Adobe Connect企业服务器没有正确的验证某些输入，可能允许用户访问某些只有管理员才可以访问页面，导致信息泄露。 Adobe Connect 6 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://download.macromedia.com/pub/connect/updaters/patchto602r389a2.zip...

Code injection

Unspecified vulnerability in Adobe Connect Enterprise Server 6 allows remote attackers to read certain pages that are restricted to the administrator via unknown vectors...

CVE-2007-4651

CVE-2007-4651 affects Adobe Connect Enterprise Server 6. The connected sources indicate an input validation issue that allows non‑admin users to access pages intended for administrators, causing an information disclosure vulnerability (restricted pages readable by non‑admins). Details in the Seeb...

CVE-2007-4394

Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before 20070810 allows local users to delete of arbitrary files via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before 20070810 allows local users to delete of arbitrary files via unknown vectors...

CVE-2007-4394

CVE-2007-4394 affects SUSE Linux 10.0/10.1 and SUSE Enterprise Server 9/10 via a vulnerability in a "core clean" cron job created by the findutils-locate package. The issue allows local users to delete arbitrary files through unknown vectors prior to 20070810. Documents describe the affected comp...

CVE-2005-4848

Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might allow remote attackers to execute arbitrary code via certain data packets...

CVE-2005-4848

CVE-2005-4848 affects Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier (before 20050607). The issue is a buffer overflow in the decompression algorithm, enabling remote attackers to execute arbitrary code via certain data packets. The provided sources confirm the vulnerability’...

CVE-2007-3483

Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware...

Design/Logic Flaw

Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware...

CVE-2007-3483

CVE-2007-3483 affects Research in Motion BlackBerry Enterprise Server 4.0–4.1. The vulnerability arises from a default configuration that allows installation of arbitrary third-party applications on BlackBerry devices, potentially enabling loading of malware. The available documents explicitly de...

CVE-2007-3483

Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware...

SUSE-SA:2006:079: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:079 kernel. The Linux 2.6 kernel has been updated to fix various security issues. On SUSE Linux Enterprise Server 9 and SUSE Linux Enterprise 10 and their derived products this update also contains various bugfixes. %NASLMINLEVEL...