IBM DB2 multiple security vulnerabilities

XMLQUERY and XMLEXIST buffer overflow, CLR stored procedures privilege escalation and DoS...

Firebird拒绝服务和信息泄漏漏洞

BUGTRAQ ID: 30229 CNCAN ID：CNCAN-2008071607 Firebird是一款流行的数据库程序。 Firebird存在多个安全问题，远程攻击者可以利用漏洞使应用程序崩溃，内存破坏及获得敏感信息。 -部分标准调用会显示服务器安装目录给普通用户。 -新建立数据时使用不正确的访问权限，可导致普通用户可访问。 -EXECUTE STATEMENT存在两个内存破坏问题，可导致服务程序崩溃，其中一个问题存在于64-bit系统平台中。 -如果表达式用于输入参数所需空间的默认值，在请求不纯的区间，可导致覆盖其他内存。 Firebird Firebird 2.1...

Code injection

OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...

CVE-2007-5926

OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...

Sql injection

SQL injection vulnerability in the login page in phphelpdesk 0.6.16 allows remote attackers to execute arbitrary SQL commands via unspecified parameters related to the "login procedures."...

CVE-2007-5926

OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...

CVE-2007-5926

CVE-2007-5926 and CVE-2007-5927 describe vulnerabilities in OpenBase 10.0.5 and earlier. The issues allow remote authenticated users to (1) execute arbitrary commands by passing shell metacharacters to stored procedures such as AsciiBackup and OEMLicenseInstall, and (2) perform directory traversa...

PT-2007-6859 · Openbase · Openbase

Name of the Vulnerable Software and Affected Versions: OpenBase versions 10.0.5 and earlier Description: The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to certain stored procedures, including 1 AsciiBackup and 2 OEMLicenseInstall, a...

Computer Associates BrightStor ARCserve Backup 11.5 - mediasvr caloggerd Denial of Service

source: https://www.securityfocus.com/bid/24017/info Computer Associates BrightStor ARCserve Backup is prone to multiple denial-of-service vulnerabilities due to memory-corruption issues caused by errors in processing arguments passed to RPC procedures. A remote attacker may exploit these issues ...

Computer Associates BrightStor ARCserve Backup 11.5 - mediasvr caloggerd Denial of Service

Computer Associates BrightStor ARCserve Backup 11.5 - mediasvr caloggerd Denial of Service source: https://www.securityfocus.com/bid/24017/info Computer Associates BrightStor ARCserve Backup is prone to multiple denial-of-service vulnerabilities due to memory-corruption issues caused by errors in...

Spill procedures use the channel against the firewall-vulnerability warning-the black bar safety net

Now many web applications such as using a firewall, and we ourselves may also in the proxy, the transparent gateway, etc. behind it for the overflow of communication caused a little trouble. Many people may think of shellcode active connection, this if the firewall is done well, no access to the...

Oracle Multiple Buffer Overflows and DoS attacks in public procedures of MDSYS.MD

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Oracle Database Buffer overflows and Denial of service vulnerabilities in public procedures of MDSYS.MD DB05 AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/oracle Jan 18, 2007 Affected versions: Oracle Database Serv...

System safety SA weak passwords bring security risks-vulnerability warning-the black bar safety net

The presence of the Microsoft SQL Server SA of the weak password vulnerability of the computer has been cyber attackers favor of one of the objects, through this loophole, you can easily get the Server Management permission, and thus a threat to network and data security. As a network...

CVE-2007-0272

Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause a denial of service crash or execute arbitrary code via unspecified vectors involving certain public procedures, aka DB05...

BO-BLOG vulnerability to submit 1 sentence horse tool[html]-vulnerability warning-the black bar safety net

Belongs to type:Web Apps The following proceduresmethodsmay carry offensive,for security research and teaching purposes. At your own risk! Code ! DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" HTMLHEADTITLEThe Csript For The "? php eval$POSTcmd?& gt;" /TITLE META...

[Full-disclosure] Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities Document ID: 71141 Advisory ID: cisco-sa-20060823-vpn3k http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml Revision 1.0 For Public Release 2006 August ...

SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-007 Advisory Title: Microsoft Office Malformed String Parsing Vulnerability Author : Elia Florio / [email protected] Release Date :...

CVE-2006-2718

JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrat...

Default credentials

JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrat...

CVE-2006-2718

JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrat...