MySQL Bounded Parameter Statement Execution Remote Buffer Overflow Vulnerability
BID:11261
Info
MySQL Bounded Parameter Statement Execution Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 11261 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 27 2004 12:00AM |
| Updated: | Sep 27 2004 12:00AM |
| Credit: | Ken Gieselman reported this vulnerability to the vendor. |
| Vulnerable: |
MySQL AB MySQL 4.1.4 MySQL AB MySQL 4.1.3 -beta |
| Not Vulnerable: |
MySQL AB MySQL 4.1.5 |
Discussion
MySQL Bounded Parameter Statement Execution Remote Buffer Overflow Vulnerability
It is reported that MySQL is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the application to properly ensure the size of a buffer is sufficient to handle user-supplied input data before performing operations that may overflow into adjacent memory regions.
This vulnerability reportedly allows for remote attackers to crash affected servers. It is unconfirmed, but there may be a possibility of remote code execution in the context of the affected server. It would likely require a complex exploit, in order to take advantage of overwriting memory contents with NULL bytes. Attackers may be able to take advantage of the structured, predictable nature of the memory operations in order to control the flow of execution of the application.
MySQL versions 4.1.3-beta and 4.1.4 are reported vulnerable, but other versions are also likely affected.
It is reported that MySQL is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the application to properly ensure the size of a buffer is sufficient to handle user-supplied input data before performing operations that may overflow into adjacent memory regions.
This vulnerability reportedly allows for remote attackers to crash affected servers. It is unconfirmed, but there may be a possibility of remote code execution in the context of the affected server. It would likely require a complex exploit, in order to take advantage of overwriting memory contents with NULL bytes. Attackers may be able to take advantage of the structured, predictable nature of the memory operations in order to control the flow of execution of the application.
MySQL versions 4.1.3-beta and 4.1.4 are reported vulnerable, but other versions are also likely affected.
Exploit / POC
MySQL Bounded Parameter Statement Execution Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
MySQL Bounded Parameter Statement Execution Remote Buffer Overflow Vulnerability
Solution:
The vendor has released version 4.1.5 has been released to address this issue:
MySQL AB MySQL 4.1.3 -beta
MySQL AB MySQL 4.1.4
Solution:
The vendor has released version 4.1.5 has been released to address this issue:
MySQL AB MySQL 4.1.3 -beta
-
MySQL AB mysql-4.1.5-gamma.tar.gz
http://dev.mysql.com/get/Downloads/MySQL-4.1/mysql-4.1.5-gamma.tar.gz/ from/pick
MySQL AB MySQL 4.1.4
-
MySQL AB mysql-4.1.5-gamma.tar.gz
http://dev.mysql.com/get/Downloads/MySQL-4.1/mysql-4.1.5-gamma.tar.gz/ from/pick
References
MySQL Bounded Parameter Statement Execution Remote Buffer Overflow Vulnerability
References:
References:
- Bug #5194 - Bulk Insert Failures with Prepared Statements (MySQL AB)
- Changes in release 4.1.5 (MySQL AB)
- MySQL Homepage (Oracle)