OpenBase Detection

The remote service is used by OpenBase, a multi-platform relational database server originally developed for the OpenStep platform. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid28290; scriptversion"1.9";...

Sun Java Web Start dnsResolve ActiveX Buffer Overflow (CVE-2007-5019)

Microsoft SQL Server is a Relational Database Management System RDBMS that can be managed through Distributed Management Objects DMO. A remote attacker can exploit this issue to execute arbitrary code on vulnerable server...

CVE-2002-2301: Undefined Security Weakness

Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database...

Firebird Relational Database SVC_attach() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted service attach request. Module Options msf use exploit/windows/misc/fb/svcattach msf undefinedsvcattach show actions ...actions... msf undefinedsvcattach set ACTION msf undefinedsvcattach show options...

[SECURITY] Fedora 7 Update: postgresql-8.2.4-1.fc7

PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...

postgresql, rh security update

CentOS Errata and Security Advisory CESA-2007:0336 Updated postgresql packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advance...

FrontBase关系数据库服务器create procedure远程栈溢出漏洞

FrontBase是一款企业级的关系数据库服务器。 FrontBase在创建存储过程时存在栈溢出漏洞，允许攻击者获得NT AUTHORITY\SYSTEM或root用户权限。 如果攻击者通过“create procedure” SQL语句传送了超长参数的话，就可以触发这个溢出，导致内存破坏。例如，以下SQL语句： create procedure "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa...

CVE-2007-1511

Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a stored procedure, to execute arbitrary code via a CREATE PROCEDURE request with a long procedure name...

CVE-2007-1511

Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a stored procedure, to execute arbitrary code via a CREATE PROCEDURE request with a long procedure name...

CVE-2007-1511

CVE-2007-1511 concerns FrontBase Relational Database Server ≤4.2.7, where a vulnerability in the CREATE PROCEDURE path allows a remote authenticated user with privileges to create stored procedures to trigger a buffer overflow and execute arbitrary code. The root cause is a long procedure name in...

CVE-2007-1511: Undefined Security Weakness

Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a stored procedure, to execute arbitrary code via a CREATE PROCEDURE request with a long procedure name...

FrontBase关系型数据库服务器过程缓冲区溢出漏洞

FrontBase是一款企业级的关系型数据库程序。 FrontBase处理'CREATE PROCEDURE' SQL请求存在缓冲区溢出，远程攻击者可以利用此漏洞以应用程序进程权限执行任意指令。 如果用户可以建立超长名的"create procedure"请求，可触发溢出，根据系统的不同可获得应用程序进程权限或系统权限。 FrontBase 4.2.7 目前没有详细解决方案提供： http://www.frontbase.com/ create procedure...

[SECURITY] Fedora Core 5 Update: postgresql-8.1.7-1.fc5

PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...

[SECURITY] Fedora Core 6 Update: postgresql-8.1.7-1.fc6

PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...

IBM DB2 Administration Server Detection

The remote host is running an IBM DB2 Administration Server. DB2 is an enterprise relational database management system, and the Administration Server is used by DB2 to administer databases across a network. C Tenable, Inc. include"compat.inc"; if description scriptid22016; scriptversion"1.31";...

security flaw

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysqlrealescape function is...

postgresql, rh security update

CentOS Errata and Security Advisory CESA-2005:433 Updated postgresql packages that fix several security vulnerabilities and risks of data loss are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...