Vulnerability CVE-2009-4019
Published: 2009-11-30   Modified: 2012-02-13

Description:
mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
MySQL - 5.0.88 Multiple Vulnerabalities
Jan Lieskovsky
03.12.2009

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:S/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4/10
2.9/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Mysql -> Mysql 

 References:
http://bugs.mysql.com/47780
http://bugs.mysql.com/48291
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
http://marc.info/?l=oss-security&m=125881733826437&w=2
http://marc.info/?l=oss-security&m=125883754215621&w=2
http://marc.info/?l=oss-security&m=125901161824278&w=2
http://support.apple.com/kb/HT4077
http://ubuntu.com/usn/usn-897-1
http://www.debian.org/security/2010/dsa-1997
http://www.redhat.com/support/errata/RHSA-2010-0109.html
http://www.ubuntu.com/usn/USN-1397-1
http://www.vupen.com/english/advisories/2010/1107
https://bugzilla.redhat.com/show_bug.cgi?id=540906
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11349
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8500
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00764.html
Copyright 2024, cxsecurity.com

 

Back to Top