MySQL Multiple Vulnerabilities

Posted on Wednesday, May 12, 2010 @ 19:56:02 PDT in Security
by Raven

SECUNIA ADVISORY ID: SA39792

VERIFY ADVISORY: http://secunia.com/advisories/39792/

DESCRIPTION: Some vulnerabilities have been reported in MySQL, which can be exploited by malicious users to bypass certain security restrictions or potentially compromise a vulnerable system and by malicious people to cause a DoS (Denial of Service). Successful exploitation of this vulnerability may allow execution of arbitrary code. The vulnerabilities are reported in versions prior to 5.1.47.

1) An error exists when processing the table name argument of a COM_FIELD_LIST command packet. This can be exploited to bypass privilege checks and e.g. read or delete content from a database table on the system by passing a specially crafted table name argument to COM_FIELD_LIST.

2) An unspecified error in the processing of packets can be exploited to cause a locked server state if a packet larger than the maximum size of one packet is received.

3) A boundary error when processing COM_FIELD_LIST command packets can be exploited to cause buffer overflow by passing an overly long table name argument to COM_FIELD_LIST.

SOLUTION: The vulnerabilities will be fixed in version 5.1.47.

PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.

ORIGINAL ADVISORY: MySQL: http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
 
 
click Related        click Share
 
 
Associated Topics

MySQL
 
News ©

Site Info v2.2.2

Last SeenLast Seen
Server TrafficServer Traffic
  • Total: 352,843,073
  • Today: 15,402
Server InfoServer Info
  • Apr 23, 2018
  • 04:36 am PDT
 
 

Daily Inspiration