Ubuntu Security Notice 1397-1 - Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.1.61 in Ubuntu 10.04 LTS, Ubuntu 10.10, Ubuntu 11.04 and Ubuntu 11.10. Ubuntu 8.04 LTS has been updated to MySQL 5.0.95. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Various other issues were also addressed.
dda21a42a15ae22869f978d3746bb4b1626d8469bab9ce1b18636fb138cf0739Gentoo Linux Security Advisory 201201-2 - Multiple vulnerabilities were found in MySQL, some of which may allow execution of arbitrary code. Versions less than 5.1.56 are affected.
117eb25ee6c51f621745264b1ef7083b0a2c6153fdaa4646571449649e0c610dUbuntu Security Notice 950-1 - It was discovered that MySQL did not check privileges before uninstalling plugins. It was discovered that MySQL could be made to delete another user's data and index files. It was discovered that MySQL incorrectly validated the table name argument of the COM_FIELD_LIST command. Other issues were also addressed.
6a36e126dcc1c3ca3fcb8360eb1f926672de115329183f50ba298671b834f235Debian Linux Security Advisory 2057-1 - Several vulnerabilities have been discovered in the MySQL database server.
c5e8f0b929297b0961d7bd9e56f999685413ac9530a564a3831c10ab73961074Mandriva Linux Security Advisory 2010-107 - The server failed to check the table name argument of a COM_FIELD_LIST command packet for validity and compliance to acceptable table name standards. This could be exploited to bypass almost all forms of checks for privileges and table-level grants by providing a specially crafted table name argument to COM_FIELD_LIST. The server could be tricked into reading packets indefinitely if it received a packet larger than the maximum size of one packet. The server was susceptible to a buffer-overflow attack due to a failure to perform bounds checking on the table name argument of a COM_FIELD_LIST command packet. By sending long data for the table name, a buffer is overflown, which could be exploited by an authenticated user to inject malicious code. Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. The updated packages have been patched to correct these issues.
c4e7a351b4df255c2bcd254f120217884009c882c3d662a9f87f93f5cefee126
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed