CVE-2005-0709

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, onexit, and exit...

CVE-2005-0709

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, onexit, and exit...

Low: Red Hat Security Advisory: glibc security update

Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. Flaws in the catchsegv and glibcbug scrip...

Debian DSA-707-1 : mysql - several vulnerabilities

Several vulnerabilities have been discovered in MySQL, a popular database. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-0957 Sergei Golubchik discovered a problem in the access handling for similar named databases. If a user is granted privileges...

HP-UX PHCO_16629 : s700_800 11.00 libc cumulative patch

s700800 11.00 libc cumulative patch : rpc.pcnfsd has an error in its use of the spool directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO16629. The text itself is copyright C Hewlett-Packard...

GLSA-200503-19 : MySQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200503-19 MySQL: Multiple vulnerabilities MySQL fails to properly validate input for authenticated users with INSERT and DELETE privileges CAN-2005-0709 and CAN-2005-0710. Furthermore MySQL uses predictable filenames when creating...

exp3.pl.txt

!/usr/bin/perl Mysql CREATE FUNCTION libc arbitrary code execution. Author: Stefano Di Paola Vulnerable: Mysql 0; use constant PASS = "USEYOURPASSHERE"; Connect to the database. my $dbh = DBI-connect"DBI:mysql:database=test;host=localhost", "root", PASS ,'RaiseError' = 1; This is the opcode point...

CVE-2005-0709

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, onexit, and exit...

HP-UX PHCO_29190 : s700_800 11.04 (VVOS) libc cumulative patch

s700800 11.04 VVOS libc cumulative patch : The remote HP-UX host is affected by multiple vulnerabilities : - calloc miscalculates the memory requirements. HPSBUX00310 SSRT2341 - Potential buffer overflow in rexec1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patc...

HP-UX PHCO_28481 : s700_800 11.11 cumulative 10.20 libc compatibility support

s700800 11.11 cumulative 10.20 libc compatibility support : The remote HP-UX host is affected by multiple vulnerabilities : - Potential buffer overflow in xdrmemgetbytes and related functions. HPSBUX00252 SSRT2439 - Potential buffer overflow in XDR library. HPSBUX00215 SSRT2336 %NASLMINLEVEL 7030...

HP-UX PHCO_28480 : s700_800 11.00 cumulative 10.20 libc compatibility support

s700800 11.00 cumulative 10.20 libc compatibility support : The remote HP-UX host is affected by multiple vulnerabilities : - Potential buffer overflow in XDR library. HPSBUX00215 SSRT2336 - Potential buffer overflow in xdrmemgetbytes and related functions. HPSBUX00252 SSRT2439 %NASLMINLEVEL 7030...

HP-UX PHCO_17601 : s700_800 11.00 libc cumulative patch

s700800 11.00 libc cumulative patch : Security Vulnerability during ftp operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO17601. The text itself is copyright C Hewlett-Packard Development Company,...

CVE-2002-1476

The CVE-2002-1476 entry describes a buffer overflow in the libc setlocale implementation on NetBSD 1.4.x–1.6 (and possibly other OSes) when LC_ALL is used with a locale string that contains more than 6 elements. This enables a local attacker to potentially execute arbitrary code via the compromis...

CVE-2002-1265

CVE-2002-1265 is evidenced in HP-UX RPC-related DoS advisories; OpenVAS/Nessus entries (PHNE_30091/30092/30093/30094, and PHKL_31500) reference CVE-2002-1265 as the RPC/HP-UX RPC DoS issue. Patches exist (HPSBUX01020 SSRT2384, etc.; PHKL_31500 consolidates fixes) addressing remote DoS via HP-UX R...

Citadel/UX Remote Buffer Overflow Exploit

No description provided by source. / Citadel/UX remote exploit By nebunu: pppppppal at yahoo dot com home.ro lamerz erased my [email protected] address for hosting exploits there.. Citadel/UX is a very well known client/server messaging for BBS which runs on port 504 by default. It has been discover...

Citadel/UX Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ========================================= Citadel/UX Remote Buffer Overflow Exploit ========================================= / Citadel/UX remote exploit By nebunu: pppppppal at yahoo dot com home.ro lamerz erased my email protected address f...

CitadelUX - Remote Buffer Overflow

CitadelUX - Remote Buffer Overflow / Citadel/UX remote exploit By nebunu: pppppppal at yahoo dot com home.ro lamerz erased my [email protected] address for hosting exploits there.. Citadel/UX is a very well known client/server messaging for BBS which runs on port 504 by default. It has been discover...

AIX FTPd libc Library Remote Overflow

Binary data 1827.prm...

Solaris 9 (sparc) : 112874-47

SunOS 5.9: libc patch. Date this patch was last updated by Sun : Oct/29/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1351...

Solaris 9 (x86) : 114432-36

SunOS 5.9x86: libc patch. Date this patch was last updated by Sun : Oct/29/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...