CVE

Id
6854  
CVE No.
CVE-2003-0025  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain privileges via certain database functions such as check_prefs() in db.pgsql, as demonstrated using mailbox.php3.  
Phase
Modified (20071121)  
Votes
ACCEPT(3) Armstrong, Cole, Green | MODIFY(1) Jones | NOOP(2) Christey, Cox  
Comments
Jones> Change "...gain privileges..." to "...gain additional | privileges..." | Christey> BID:6559 | URL:http://www.securityfocus.com/bid/6559 | XF:imp-multiple-sql-injection(11028) | URL:http://www.iss.net/security_center/static/11028.php | Christey> CONECTIVA:CLA-2003:690 | URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000690  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
38924 6854 CVE-2003-0025 BUGTRAQ:20030108 IMP 2.x SQL injection vulnerabilities  View
38925 6854 CVE-2003-0025 URL:http://marc.info/?l=bugtraq&m=104204786206563&w=2  View
38926 6854 CVE-2003-0025 BUGTRAQ:20030108 Re: IMP 2.x SQL injection vulnerabilities  View
38927 6854 CVE-2003-0025 URL:http://www.securityfocus.com/archive/1/306268  View
38928 6854 CVE-2003-0025 DEBIAN:DSA-229  View
38929 6854 CVE-2003-0025 URL:http://www.debian.org/security/2003/dsa-229  View
38930 6854 CVE-2003-0025 SUSE:SuSE-SA:2003:0008  View
38931 6854 CVE-2003-0025 BID:6559  View
38932 6854 CVE-2003-0025 URL:http://www.securityfocus.com/bid/6559  View
38933 6854 CVE-2003-0025 SECTRACK:1005904  View
38934 6854 CVE-2003-0025 URL:http://www.securitytracker.com/id?1005904  View
38935 6854 CVE-2003-0025 SECUNIA:8087  View
38936 6854 CVE-2003-0025 URL:http://secunia.com/advisories/8087  View
38937 6854 CVE-2003-0025 SECUNIA:8177  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63280 JVNDB-2003-000006 ISC DHCPD に含まれる NSUPDATE 機能の minires ライブラリにおけるバッファオーバーフローの脆弱性 ISC DHCPD にはホストからの DHCP リクエストを処理後、ホスト情報を DNS サーバへ送信する NSUPDATE が使用する minires ライブラリの不備によりバッファオーバーフローが発生する脆弱性が存在します。 CVE-2003-0026 6854 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000006.html  View