EUVD-2005-4706

Malware in sbrugna...

Gentoo Security Advisory GLSA 200606-18 (pam_mysql)

The remote host is missing updates announced in advisory GLSA 200606-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-18 (pam_mysql)

The remote host is missing updates announced in advisory GLSA 200606-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200606-18 : PAM-MySQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200606-18 PAM-MySQL: Multiple vulnerabilities A flaw in handling the result of pamgetitem as well as further unspecified flaws were discovered in PAM-MySQL. Impact : By exploiting the mentioned flaws an attacker can cause a Denial...

PAM-MySQL: Multiple vulnerabilities

Background PAM-MySQL is a PAM module used to authenticate users against a MySQL backend. Description A flaw in handling the result of pamgetitem as well as further unspecified flaws were discovered in PAM-MySQL. Impact By exploiting the mentioned flaws an attacker can cause a Denial of Service an...

DEBIAN-CVE-2006-0056

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

CVE-2006-0056

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

CVE-2006-0056

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

Double free

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

CVE-2006-0056

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

CVE-2005-4713

CVE-2005-4713 affects PAM-MySQL: a flaw in the pam_mysql_sql_log path (used when PAM-MySQL is integrated with vsftpd) can trigger a segmentation fault, causing remote denial of service. Versions affected are PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3. The issue is tied to not including...

CVE-2006-0056

The CVE-2006-0056 issue affects PAM-MySQL in the 0.6.x series (before 0.6.2) and 0.7.x series (before 0.7pre3). A double-free arises in the handling of pam_get_item() results within authentication/ token alteration code, which can cause an application crash and may allow arbitrary code execution ...

CVE-2005-4713

Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors, probably involving the pammysqlsqllog function when being used in vsftpd, which does not...

CVE-2006-0056

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

CVE-2006-0056

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

CVE-2005-4713

Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors, probably involving the pammysqlsqllog function when being used in vsftpd, which does not...

CVE-2006-0056: Improper Restriction of Operations within the Bounds of a Memory Buffer

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

CVE-2005-4713: Undefined Security Weakness

Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors, probably involving the pammysqlsqllog function when being used in vsftpd, which does not...

[SA18598] PAM-MySQL SQL Logging and Authentication Vulnerabilities

TITLE: PAM-MySQL SQL Logging and Authentication Vulnerabilities SECUNIA ADVISORY ID: SA18598 VERIFY ADVISORY: http://secunia.com/advisories/18598/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: PAM-MySQL 0.x http://secunia.com/product/7880/ DESCRIPTION: Some...

PAM-MySQL contains a double-free vulnerability

Overview PAM-MySQL contains a double-free vulnerability that may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description PAM-MySQL provides a Pluggable Authentication Module PAM interface to a MySQL database. PAM-MySQL does not securely handle a point...