MySQL Multiple Vulnerabilities

Posted on Wednesday, May 12, 2010 @ 20:56:02 CEST in Security
by Raven



DESCRIPTION: Some vulnerabilities have been reported in MySQL, which can be exploited by malicious users to bypass certain security restrictions or potentially compromise a vulnerable system and by malicious people to cause a DoS (Denial of Service). Successful exploitation of this vulnerability may allow execution of arbitrary code. The vulnerabilities are reported in versions prior to 5.1.47.

1) An error exists when processing the table name argument of a COM_FIELD_LIST command packet. This can be exploited to bypass privilege checks and e.g. read or delete content from a database table on the system by passing a specially crafted table name argument to COM_FIELD_LIST.

2) An unspecified error in the processing of packets can be exploited to cause a locked server state if a packet larger than the maximum size of one packet is received.

3) A boundary error when processing COM_FIELD_LIST command packets can be exploited to cause buffer overflow by passing an overly long table name argument to COM_FIELD_LIST.

SOLUTION: The vulnerabilities will be fixed in version 5.1.47.

PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.

click Related        click Share
Associated Topics

News ©

Site Info v2.2.2

Last SeenLast Seen
Server TrafficServer Traffic
  • Total: 375,180,430
  • Today: 61,640
Server InfoServer Info
  • Jan 18, 2019
  • 10:39 pm CET