mysql: buffer overflow [LWN.net]

Package(s):

mysql

CVE #(s):

CAN-2005-2558

Created:

September 12, 2005

Updated:

January 12, 2006

Description:

The mysql CREATE FUNCTION can be used to create a buffer overflow. A specially crafted long function name can be used by a local attacker to crash the server or execute arbitrary code with the privileges of the server.

Alerts:

Fedora-Legacy	FLSA:167803	2006-01-10
Ubuntu	USN-180-2	2005-12-05
OpenPKG	OpenPKG-SA-2005.024	2005-12-03
Debian	DSA-833-2	2005-10-04
Debian	DSA-833-1	2005-10-01
Debian	DSA-831-1	2005-09-30
Debian	DSA-829-1	2005-09-30
Mandriva	MDKSA-2005:163	2005-09-12
Ubuntu	USN-180-1	2005-09-12

(Log in to post comments)