PT-2008-2696

Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 certain input processed by formatter/text gedit.py aka the gui editor formatter; 2 a page name, which triggers an injection in PageEditor.py when the...

Mambo MOStlyCE Mambot Arbitrary File Rename

The remote host is running MOStlyContent Editor MOStlyCE, the default WYSIWYG editor for Mambo. The version of MOStlyCE installed on the remote host contains a design flaw that may allow an attacker to rename files subject to the privileges of the web server user id. An unauthenticated attacker m...

mysql: possible system table information overwrite using symlinks

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system...

mysql: possible system table information overwrite using symlinks

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system...

MySQL Enterprise Server 5.0 < 5.0.52 Multiple Vulnerabilities

The version of MySQL Enterprise Server 5.0 installed on the remote host is earlier than 5.0.52. Such versions reportedly are affected by the following issues : - Using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options can be used to overwrite system table...

Oracle MySQL Enterprise Server < 5.0.52 Multiple Vulnerabilities

Binary data 4312.prm...

MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities

Binary data 4313.prm...

MySQL服务器RENAME TABLE系统表格覆盖漏洞

BUGTRAQ ID: 26765 CVECAN ID: CVE-2007-5969 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 MySQL在某些配置情况下存在漏洞，本地攻击者可能利用此漏洞修改破坏数据表。 如果表格设置了DATA DIRECTORY和INDEX DIRECTORY选项的话，MySQL服务器在使用RENAME TABLE语句重新命名该表格时存在错误，可能允许攻击者通过某些符号链接替换所指向的文件导致覆盖系统表格信息。 MySQL AB MySQL...

MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities

The version of MySQL Server installed on the remote host reportedly is affected by the following issues : - It is possible, by creating a partitioned table using the DATA DIRECTORY and INDEX DIRECTORY options, to gain privileges on other tables having the same name as the partitioned table. Bug...

MySQL Server重命名表系统表覆盖漏洞

MySQL Server是一款开放源代码的数据库。br / MySQL Server不正确处理符号链接，本地攻击者可以利用漏洞覆盖MySQL系统表导致拒绝服务攻击。br / 使用明确的DATA DIRECTORY和INDEX DIRECTORY选项使用RENAME TABLE对表进行操作。可导致通过符号链接使用替代文件来覆盖系统表信息。可造成数据库崩溃。br / MySQL AB MySQL 5.0.50 MySQL AB MySQL 5.0.49 MySQL AB MySQL 5.0.48 MySQL AB MySQL 5.0.47 MySQL AB MySQL 5.0.46 MySQ...

CVE-2007-5969

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system...

MySQL Community Server 5.0 < 5.0.51 RENAME TABLE Symlink System Table Overwrite

The version of MySQL Community Server installed on the remote host reportedly fails to check whether a file to which a symlink points exists when using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options. A local attacker may be able to leverage this issue to...

CVE-2007-5969: Undefined Security Weakness

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system...

Untrusted Application or Applet May Move or Copy Arbitrary Files

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...

CONTENTCustomizer 3.1 - Dialog.php Unauthorized Access

CONTENTCustomizer 3.1 - Dialog.php Unauthorized Access source: https://www.securityfocus.com/bid/26437/info CONTENTCustomizer is prone to an unauthorized access vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker could exploit this issue to delete...

mysql DROP privilege not enforced when renaming tables

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables...

CVE-2007-4650: Undefined Security Weakness

Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to 1 rename items, 2 read and modify item properties, or 3 lock and replace items via unknown vectors in a the WebDAV module; and 4 edit unspecified data files using "linked items" in WebDAV and b Reupload modules...

MySQL RENAME privilege escalation

DROP permission is not checked during RENAME operation...

Stack overflow

Stack-based buffer overflow in the renameprincipal2svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal...

DEBIAN-CVE-2007-2798

Stack-based buffer overflow in the renameprincipal2svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal...