1392 matches found
mysql -- database suid privilege escalation
Dmitri Lenev reports a privilege escalation in MySQL. MySQL evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote and local authenticated users to gain privileges through a routine that has been made available...
CVE-2006-0357
Cerberus FTP Server 2.32 (and possibly earlier) is affected by a remote DoS flaw: sending a long string that does not contain a valid FTP command can trigger a denial of service. Affected component is Cerberus FTP Server, with the root cause described as an unspecified DoS condition triggered by ...
FreeBSD : mysql -- GRANT access restriction problem (01c231cd-4393-11d9-8bb9-00065be4b5b6)
When a user is granted access to a database with a name containing an underscore and the underscore is not escaped then that user might also be able to access other, similarly named, databases on the affected system. The problem is that the underscore is seen as a wildcard by MySQL and therefore ...
FreeBSD : mozilla -- scripting vulnerabilities (b2e6d1d6-1339-11d9-bc4a-000c41e2cdad)
Several scripting vulnerabilities were discovered and corrected in Mozilla : CVE-2004-0905 JavaScript; links dragged onto another frame or page allows an attacker to steal or modify sensitive information from other sites. The user could be convinced to drag obscurred links in the context of a gam...
Mandrake Linux Security Advisory : MySQL (MDKSA-2005:070)
A vulnerability in MySQL would allow a user with grant privileges to a database with a name containing an underscore character '' to have the ability to grant privileges to other databases with similar names. This problem was previously discovered and fixed, but a new case where the problem still...
CVE-2004-0703
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control...
CVE-2000-0045
CVE-2000-0045 affects MySQL: local users can modify passwords for arbitrary MySQL users via the GRANT privilege. The vulnerability is documented in CVE/NVD with a base score of 6.4 (MEDIUM). Connected documents confirm the issue but do not provide explicit affected versions or remediation details...
MySQL 3.22.273.22.293.23.8 - GRANT Global Password Changing
MySQL 3.22.273.22.293.23.8 - GRANT Global Password Changing source: https://www.securityfocus.com/bid/926/info MySQL is a popular RDBMS used by many websites as a back-end. It is possible for users with GRANT access to change passwords for every user in the database including the mysql superuser...
MySQL 3.22.27/3.22.29/3.23.8 - GRANT Global Password Changing
source: https://www.securityfocus.com/bid/926/info MySQL is a popular RDBMS used by many websites as a back-end. It is possible for users with GRANT access to change passwords for every user in the database including the mysql superuser. MySQL also ships with a default "test" account which has...
mysql.grant.txt
Hi. While installing MySQL 3.22.29 and testing it out, I discovered a very serious bug in it's handling of the GRANT statement. I have decided to post this message at this time although a fixed distribution is not yet available at mysql.com. The reason for this is that the subject has been...
