Записи mysql

Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connect

• pre-auth RCE

mysql · maxdb29 авг. 2006 г.

The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scr

• Без аутентификации
• Обход аутентификации

mysql · mysql6 дек. 2004 г.

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP

• pre-auth RCE

mysql · maxdb25 апр. 2005 г.

Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privil

• RCE

mysql · mysql22 сент. 2003 г.

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitr

• pre-auth RCE
• Ошибки памяти

yassl · yassl10 янв. 2008 г.

Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly

• pre-auth RCE

mysql · mysql6 дек. 2004 г.

Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code

• pre-auth RCE

mysql · maxdb10 янв. 2005 г.

Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers

• pre-auth RCE

mysql · maxdb26 апр. 2005 г.

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code

• RCE

mysql · mysql5 мая 2006 г.

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table

• Без аутентификации

mysql · mysql3 нояб. 2004 г.

Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 al

mysql · mysql13 июл. 2009 г.

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4

mysql · mysql server10 дек. 2007 г.

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows

• pre-auth RCE
• Ошибки памяти

mysql · mysql21 дек. 2012 г.

The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attacker

• Без аутентификации

mysql · mysql5 мая 2006 г.

Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIEL

• RCE
• Ошибки памяти

mysql · mysql7 июн. 2010 г.

Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long pas

• pre-auth RCE

mysql · maxdb13 янв. 2005 г.

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL

• pre-auth RCE
• SQL-инъекция

mysql · mysql1 июн. 2006 г.

Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a differe

• Без аутентификации
• Ошибки памяти

mysql · mysql28 мар. 2013 г.

Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a differe

• Без аутентификации
• Ошибки памяти

mysql · mysql28 мар. 2013 г.

The mysql-ocaml bindings 1.0.4 for MySQL do not properly support the mysql_real_escape_string function, which might allow remote attackers t

• Без аутентификации

mysql-ocaml · mysql-ocaml22 окт. 2009 г.

The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera

• Локальное повышение привилегий

mariadb · mariadb27 окт. 2017 г.

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of t

mysql · mysql18 авг. 2006 г.

The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which t

• pre-auth RCE
• SQL-инъекция

mysql · mysql16 авг. 2012 г.

The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a

• Без аутентификации

mysql · mysql30 нояб. 2009 г.

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended tab

• Обход пути

mysql · mysql7 июн. 2010 г.