Secunia
Login
|
|
|
|
|
|
|
|
|
MySQL Multiple Security Issues
Release Date: 2010-08-24 Last Update: 2010-10-01 Views: 5,046
Secunia Advisory SA41048
Where:
From local network
Impact:
Unknown, DoS,
Solution Status:
Vendor Patch
CVE Reference(s):
Description
Some security issues have been reported in MySQL, where one has unknown impacts while others can be exploited by malicious users to cause a DoS (Denial of Service).
1) An error within the handling of DDL statements after having changed the "innodb_file_per_table" or "innodb_file_format" configuration parameters can be exploited to crash the server.
2) An error when handling joins involving a unique "SET" column can be exploited to crash the server.
3) An error when handling NULL arguments passed to "IN()" or "CASE" operations can be exploited to crash the server.
4) An error when processing certain malformed arguments passed to the "BINLOG" statement can be exploited to crash the server.
5) An error when processing "TEMPORARY" InnoDB tables featuring nullable columns can be exploited to crash the server.
6) An error when performing alternating reads from two indexes on tables using the "HANDLER" interface can be exploited to crash the server.
7) An error when handling "EXPLAIN" statements on certain queries can be exploited to crash the server.
8) An error when handling "LOAD DATA INFILE" statements can lead to the return of an "OK" packet although errors have been encountered.
Solution:
Update to version 5.1.49.
Provided and/or discovered by:
Reported in MySQL bug reports by:
1, 8) Elena Stepanova
2, 3, 4) Shane Bester
5) Boris Reisig
6) Matthias Leich
7) Bjorn Munch
Original Advisory:
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html
Deep Links:
Links available to Secunia VIM customers
Do you have additional information related to this advisory?
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
Subject: MySQL Multiple Security Issues
|
No posts yet |
|
You must be logged in to post a comment. |
