CVE-2008-4106

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the userlogin column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's...

CVE-2008-4106

WordPress prior to 2.6.2 is affected by CVE-2008-4106: improper handling of MySQL warnings about username length and trailing spaces in username comparison can allow a remote attacker to change another user’s password by registering a similar username and requesting a password reset. This is tied...

CVE-2008-4106

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the userlogin column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's...

WordPress <= 2.6.1 - SQL Truncation Vulnerability #1

Because of this vulnerability, the attackers can leverage exposures in products that rely on these functions for security-relevant functionality. Solution Update WordPress...

Advisory 05/2008: Wordpress user_login Column SQL Truncation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Wordpress userlogin Column SQL Truncation Vulnerability Release Date: 2008/09/12 Last Modified: 2008/09/12 Author: Stefan Esser stefan.esseratsektioneins.de Application: Wordpress =...

Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit

No description provided by source. !/usr/bin/php ?php ------------------------------------------------------------ quick'n'dirty wordpress admin-take0ver poc by iso^kpsbr in august 2oo8 works w/ wordpress 2.6.1 .oO private -- do not spread! Oo. you'll have to make sure you run roughly the same ph...

Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit

Exploit for unknown platform in category web applications ============================================================== Wordpress 2.6.1 SQL Column Truncation Admin Takeover Exploit ============================================================== !/usr/bin/php =5.2.1 you'll need to be as well, in...

Wordpress 2.6.1 SQL Column Truncation Vulnerability

No description provided by source. WordPress 2.6.1 SQL Column Truncation Vulnerability PoC found by irk4zatyahoo.pl homepage: http://irk4z.wordpress.com/ this is not critical vuln ; first, read this discovery: http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/ in...

WordPress 2.6.1 - Admin Takeover (SQL Column Truncation)

WordPress 2.6.1 - Admin Takeover SQL Column Truncation !/usr/bin/php =5.2.1 you'll need to be as well, in case server is wp261php520 php-5.2.1/php createtables.php wp261php521 ------------------------------------------------------------- $BLOG = $SERVER'argv'1; echo "+ w0rdpress 2.6.1. admin...

About MySQL SQL Column Truncation Vulnerabilities-vulnerability warning-the black bar safety net

By:thorn Stefan Esser today wrote a great article, mentioned about MySQL in the two defect 1. maxpacketsize problems 2. SQL Column Truncation attack I tested the second one. According to the paper in the description, when the mysql sqlmode is set to default, i.e. no turn on STRICTALLTABLES...

WordPress Core 2.6.1 - Admin Takeover (SQL Column Truncation)

!/usr/bin/php =5.2.1 you'll need to be as well, in case server is wp261php520 php-5.2.1/php createtables.php wp261php521 ------------------------------------------------------------- $BLOG = $SERVER'argv'1; echo "+ w0rdpress 2.6.1. admin takeover, iso 0808\n"; if!$BLOG echo "! Usage:...

WordPress 2.6.1 - SQL Column Truncation

WordPress 2.6.1 - SQL Column Truncation WordPress 2.6.1 SQL Column Truncation Vulnerability PoC found by irk4zatyahoo.pl homepage: http://irk4z.wordpress.com/ this is not critical vuln ; first, read this discovery: http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/...

Wordpress 2.6.1 SQL Column Truncation Vulnerability

Exploit for unknown platform in category web applications =================================================== Wordpress 2.6.1 SQL Column Truncation Vulnerability =================================================== WordPress 2.6.1 SQL Column Truncation Vulnerability PoC this is not critical vuln ;...

OpenOffice rtl_allocateMemory() Remote Code Execution Vulnerability (Linux)

This host has OpenOffice.Org installed, which is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodopenofficecodeexecvulnlin900043.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: OpenOffice rtlallocateMemory Remote Code Execution Vulnerability Authors:...

OpenOffice < 3.2.0 'rtl_allocateMemory()' RCE Vulnerability - Windows

OpenOffice.Org is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenOffice rtl_allocateMemory() Remote Code Execution Vulnerability (Windows)

This host has OpenOffice.Org installed, which is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodopenofficecodeexecvulnwin900042.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: OpenOffice rtlallocateMemory Remote Code Execution Vulnerability Windows Authors:...

OpenOffice.org < 3.2.0 'rtl_allocateMemory()' RCE Vulnerability - Linux

OpenOffice.org is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openoffice.org security update

CentOS Errata and Security Advisory CESA-2008:0835 Updated openoffice.org packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office...

Integer overflow

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in the memory allocator in OpenOffice.org OOo 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted document, related to...

RHEL 5 : openoffice.org (RHSA-2008:0835)

Updated openoffice.org packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications, such...