[Full-disclosure] HP Mercury Quality Center Any SQL execution

Vendor: HP Product: Mercury Quality Center Version: 9.0 build 9.1.0.4352 Vendor Informed: No HP Mercury Quality Center is test management product for companys to do software testing and quality insurance. HP Mercury Quality Center has additional guest command on server which allows any user who...

Lyris ListManager MSDE Weak sa Password

The remote host appears to be running ListManager, a web-based commercial mailing list management application from Lyris. The version of ListManager on the remote host was installed using Microsoft SQL Server Desktop Engine MSDE for its database backend along with a weak password for the 'sa'...

lyris_attachment_mssql.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

lyris-listmanager.txt

Title: Lyris ListManager Multiple Flaws Release Date: December 8, 2005 Patch Date: Unknown v8.9b resolves most issues Reported Date: June 21, 2005 Vendor: Lyris Systems Affected: Lyris ListManager v5.0-8.8a most flaws Summary: The Lyris ListManager software is vulnerable to numerous SQL injection...

CVE-2005-4145

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space "lyris" and up to 5 digits, possibly from the process ID, which allows remote attackers to gain access via a brute force attack...

CVE-2005-4145

Lyris ListManager MSDE (MSDE-backed ListManager 5.0–8.9b) exposes a weak sa password: “lyris” followed by up to five digits (likely the installer’s process ID). This enables remote brute-force access to the SA account in the SQL Server backend, allowing database administrator access. Public sourc...

CVE-2005-4145

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space "lyris" and up to 5 digits, possibly from the process ID, which allows remote attackers to gain access via a brute force attack...

Lyris ListManager Read Message Attachment SQL Injection Exploit

Exploit for unknown platform in category remote exploits =============================================================== Lyris ListManager Read Message Attachment SQL Injection Exploit =============================================================== This file is part of the Metasploit Framework an...

Lyris ListManager MSDE Weak sa Password

This module exploits a weak password vulnerability in the Lyris ListManager MSDE install. During installation, the 'sa' account password is set to 'lminstall'. Once the install completes, it is set to 'lyris' followed by the process ID of the installer. This module brute forces all possible proce...

CVE-2002-1123

CVE-2002-1123 is a buffer overflow in the authentication function of Microsoft SQL Server 2000 and MSDE 2000 triggered by a long TCP 1433 request, enabling remote code execution. Public writeups and scanners (MS02-056, Metasploit/MSF module, OpenVAS checks) confirm the existence of the Hello Over...

CVE-2002-1123: Undefined Security Weakness

Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine MSDE 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow...

CVE-2003-0148

The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that 1 obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, 2 crack t...

CVE-2003-0148

The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that 1 obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, 2 crack t...

CVE-2003-0148

The CVE-2003-0148 entry concerns a vulnerability in the default MSDE installation used with McAfee ePolicy Orchestrator (ePO) 2.0–3.0. The issue allows an attacker who can access the ePO server to obtain the database administrator username and the encrypted password from the server config file. T...

CVE-2003-0148: Undefined Security Weakness

The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that 1 obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, 2 crack t...

CVE-2003-0231

Summary: CVE-2003-0231 affects Microsoft SQL Server 7.0, SQL Server 2000, and MSDE. A long request to a named pipe can trigger a denial of service, making the server unresponsive for local or remote authenticated users. The issue arises from how SQL Server interprets a return code from a named-pi...

CVE-2003-0231: Undefined Security Weakness

Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service crash or hang via a long request to a named pipe...

CVE-2003-0232: Undefined Security Weakness

Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls LPC port that leads to a buffer overflow...

CVE-2003-0230: Undefined Security Weakness

Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability...

CVE-2002-0642: Undefined Security Weakness

The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine MSDE 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key...