CVE-2004-0836 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2004-0836
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0836

Description: Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/17047 TRUSTIX http://www.trustix.org/errata/2004/0054/ SAID Secunia Advisory: SA12305 REDHAT http://www.redhat.com/support/errata/RHSA-2004-611.html http://www.redhat.com/support/errata/RHSA-2004-597.html MISC http://lists.mysql.com/internals/14726 http://bugs.mysql.com/bug.php?id=4017 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml DEBIAN http://www.debian.org/security/2004/dsa-562 CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892 CIAC http://www.ciac.org/ciac/bulletins/p-018.shtml BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=110140517515735&w=2 BID 10981

Return to the previous page.