1591 matches found
FreeBSD : mozilla -- scripting vulnerabilities (b2e6d1d6-1339-11d9-bc4a-000c41e2cdad)
Several scripting vulnerabilities were discovered and corrected in Mozilla : CVE-2004-0905 JavaScript; links dragged onto another frame or page allows an attacker to steal or modify sensitive information from other sites. The user could be convinced to drag obscurred links in the context of a gam...
Mandrake Linux Security Advisory : MySQL (MDKSA-2005:070)
A vulnerability in MySQL would allow a user with grant privileges to a database with a name containing an underscore character '' to have the ability to grant privileges to other databases with similar names. This problem was previously discovered and fixed, but a new case where the problem still...
CVE-2004-0703
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control...
CVE-2004-0703: Undefined Security Weakness
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control...
CVE-2000-0045
CVE-2000-0045 affects MySQL: local users can modify passwords for arbitrary MySQL users via the GRANT privilege. The vulnerability is documented in CVE/NVD with a base score of 6.4 (MEDIUM). Connected documents confirm the issue but do not provide explicit affected versions or remediation details...
CVE-2000-0045: Undefined Security Weakness
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege...
MySQL 3.22.273.22.293.23.8 - GRANT Global Password Changing
MySQL 3.22.273.22.293.23.8 - GRANT Global Password Changing source: https://www.securityfocus.com/bid/926/info MySQL is a popular RDBMS used by many websites as a back-end. It is possible for users with GRANT access to change passwords for every user in the database including the mysql superuser...
MySQL 3.22.27/3.22.29/3.23.8 - GRANT Global Password Changing
source: https://www.securityfocus.com/bid/926/info MySQL is a popular RDBMS used by many websites as a back-end. It is possible for users with GRANT access to change passwords for every user in the database including the mysql superuser. MySQL also ships with a default "test" account which has...
mysql.grant.txt
Hi. While installing MySQL 3.22.29 and testing it out, I discovered a very serious bug in it's handling of the GRANT statement. I have decided to post this message at this time although a fixed distribution is not yet available at mysql.com. The reason for this is that the subject has been...
