MGASA-2013-0201 Updated python-pymongo packages fix CVE-2013-2132

PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...

Updated python-pymongo packages fix CVE-2013-2132

PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...

CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

Code injection

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

UBUNTU-CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

CVE-2013-4650

MongoDB versions affected are 2.4.x before 2.4.5 and 2.5.x before 2.5.1. The issue allows remote authenticated users to obtain internal system privileges by using the __system username in an arbitrary database. This is a privilege-escalation vulnerability with impact as described in the sources. ...

CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

CVE-2013-4650

Removed by vendor...

PT-2013-5114

Name of the Vulnerable Software and Affected Versions MongoDB versions 2.4.x through 2.4.4 MongoDB versions 2.5.x through 2.5.0 Description The issue allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database. Recommendations...

CVE-2013-4650: Undefined Security Weakness

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

USN-1897-1: PyMongo vulnerability

Jibbers McGee discovered that PyMongo incorrectly handled certain invalid DBRefs. An attacker could use this issue to cause PyMongo to crash, resulting in a denial of service...

Debian Security Advisory DSA 2705-1 (pymongo - denial of service)

Jibbers McGee discovered that PyMongo, a high-performance schema-free document-oriented data store, is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash. The oldstable distribution squeeze is not affected by this issue...

DSA-2705-1 pymongo - denial of service

Bulletin has no description...

Debian: Security Advisory (DSA-2705-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MongoDB - conn Mongo Object Remote Code Execution

MongoDB - conn Mongo Object Remote Code Execution source: https://www.securityfocus.com/bid/61309/info MongoDB is prone to a remote code execution vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to execute arbitrary code within t...

MongoDB - 'conn' Mongo Object Remote Code Execution

source: https://www.securityfocus.com/bid/61309/info MongoDB is prone to a remote code execution vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to execute arbitrary code within the context of the affected application. MongoDB...

MongoDB 空指针引用拒绝服务漏洞(CVE-2013-2132)

Bugtraq ID:60252 CVE ID:CVE-2013-2132 MongoDB是一个基于分布式文件存储的数据库。由C++语言编写 在解析非法DBref记录时MongoDB存在一个安全漏洞，允许远程攻击者利用漏洞触发一个空指针引用错误，可使应用程序崩溃 0 MongoDB 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： https://github.com/mongodb/mongo-python-driver/commit/a060c15ef87e0f0e72974c7c0e57fe811bbd06a2...

CVE-2013-2132

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...