CVE-2003-0319: Undefined Security Weakness

Buffer overflow in the IMAP server IMAPMax for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command...

CVE-2003-0150: Undefined Security Weakness

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf...

MySQL privelege escalation

By spoofing datadir/my.cnf with SELECT INTO it's possible to launch MySQL with any account, including root...

openbsd-select-bug.txt

Hi there, Recently a bug in the select syscall of openbsd was published. This text describes the details and the eventual exploitation of this bug. First of all let us look at the definition of select: int selectint nfds, fdset readfds, fdset writefds, fdset exceptfds, struct timeval timeout; The...

OpenBSD contains buffer overflow in "select" call

Overview A locally exploitable buffer overflow exists in all versions of OpenBSD. Description The buffer overflow exists in the select2 system call. The overflow occurs if select is supplied with arbitrary negative values. --- Impact Local users can gain system privileges and execute code in the...

Signed/unsigned conversion bug in OpenBSD select() call

By passing negative argument to select function it's possible to overwrite the fragment of kernel memory...

CVE-2001-0584: Undefined Security Weakness

IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service hang via long 1 SELECT or 2 EXAMINE commands...

CVE-2000-0202: Undefined Security Weakness

Microsoft SQL Server 7.0 and Microsoft Data Engine MSDE 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query...

PT-1999-1082 · Netbsd · Netbsd

Name of the Vulnerable Software and Affected Versions: NetBSD affected versions not specified Description: A race condition exists between the select and accept calls in NetBSD TCP servers, allowing remote attackers to cause a denial of service. Recommendations: At the moment, there is no...