training – Wizkid Blogs

2 Posts

January 2017 Study Schedule

CVE-2003-1605 (curl)
curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.
CVE-2006-4343 (debian_linux, openssl, ubuntu_linux)
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
CVE-2006-4785 (moodle)
SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert th […]