192 matches found
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-06391)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server:PluggableAuth subcomponent of the MySQLServer component of Oracle MySQL. An attacker could exploit...
CVE-2017-3453
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple...
SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2015:2088-2)
The LibVNCServer package was updated to fix the following security issues : - bsc897031: fix several security issues : - CVE-2014-6051: Integer overflow in MallocFrameBuffer on client side. - CVE-2014-6052: Lack of malloc return value checking on client side. - CVE-2014-6053: Server crash on a ve...
CentOS 6 / 7 : libXfont (CESA-2015:1708)
An updated libXfont package that fixes three security issues is now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
The depth of investigation of CVE-2 0 1 5-5 4 7 7&CloudFlare Virtual DNS how to protect their users-vulnerability warning-the black bar safety net
Last week, the ISC released a patch that fixes the BIND9 DNS server in a remote exploit the vulnerability. This exploit will cause the server during the processing of a data packet when the occurrence of a crash. ! The announcement pointed out, the server in the processing TKEY the type of the...
Important: php56
Issue Overview: An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened. CVE-2015-4021 An integer overflow flaw leading to...
MySQL < 5.5.6 Multiple Denial of Service
The version of MySQL installed on the remote host is older than 5.5.6. As such, it reportedly is prone to multiple denial of service attacks : - The improper handling of type errors during argument evaluation in extreme-value functions, e.g., 'LEAST' or 'GREATEST' causes server crashes...
MySQL < 5.0.92 Multiple Denial of Service
The version of MySQL installed on the remote host is older than 5.0.92. As such, it reportedly is prone to multiple denial of service attacks : - The improper handling of type errors during argument evaluation in extreme-value functions, e.g., 'LEAST' or 'GREATEST' causes server crashes...
New Flaw in BIND Causing Server Crashes
There’s a new vulnerability in the popular BIND name server software that is causing various versions of the application to crash unexpectedly after logging a certain kind of error. The Internet Software Consortium, which maintains BIND, is investigating the issue and trying to determine the...
FreeBSD : fetchmail -- STARTTLS denial of service (f7d838f2-9039-11e0-a051-080027ef73ec)
Matthias Andree reports : Fetchmail version 5.9.9 introduced STLS support for POP3, version 6.0.0 added STARTTLS for IMAP. However, the actual STARTTLS-initiated in-band SSL/TLS negotiation was not guarded by a timeout. Depending on the operating system defaults as to TCP stream keepalive mode,...
Mandriva Update for mysql MDVSA-2010:155-1 (mysql)
Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVSA-2010:155-1 mysql Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
MySQL Community Server 5.1 < 5.1.51 Multiple Denial of Service Vulnerabilities
Binary data 5677.prm...
MySQL Community Server < 5.1.51 Multiple Vulnerabilities
The version of MySQL Community Server installed on the remote host is earlier than 5.1.51 and is, therefore, potentially affected by multiple vulnerabilities: - A privilege escalation vulnerability exists when using statement-based replication. Version specific comments used on a master server wi...
MySQL 5.0 < 5.0.88 Multiple Vulnerabilities
The version of MySQL 5.0 installed on the remote host is earlier than 5.0.88. It is, therefore, potentially affected by the following vulnerabilities : - MySQL clients linked against OpenSSL are vulnerable to man-in-the-middle attacks. Bug 47320 - The GeomFromWKB function can be manipulated to...
Use Super Bunny to obtain the terminal administrator password-vulnerability warning-the black bar safety net
Everyone engage to the broiler open 3 3 8 9 After the think what not to do? The establishment of the Account will always be administrators findwhy don't you put the Administrator's password. Is the administrator passwordGeneral the server he will always set up automatic landing, the principle is...
Debian: Security Advisory (DSA-1413-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1413-1 : mysql - multiple vulnerabilities
Several vulnerabilities have been found in the MySQL database packages with implications ranging from unauthorized database modifications to remotely triggered server crashes. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2583 The indecimal::set...
Multiple vulnerabilities in ircu
Ircu is the open source IRC server used on Undernet and other IRC networks. I Wouter Coekaerts discovered multiple vulnerabilities in various versions some time ago, which have all been fixed for some time since 2.10.12.06 but not yet made public. Now that servers have had enough time to upgrade,...
Asterisk 1.2.9 and Asterisk 1.0.11 Released - Security Fix
The Asterisk Development Team today released Asterisk 1.2.9 and Asterisk 1.0.11 to address a security vulnerability in the IAX2 channel driver chaniax2. The vulnerability affects all users with IAX2 clients that might be compromised or used by a malicious user, and can lead to denial of service...
