MySQL Server Unspecified Remote Arbitrary Command Execution Vulnerability

Bugtraq ID:	26947
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 19 2007 12:00AM
Updated:	Dec 20 2007 06:01PM
Credit:	WabiSabi Labi is credited with discovering this issue.
Vulnerable:	MySQL AB MySQL 5.0.51 MySQL AB MySQL 5.0.45
Not Vulnerable:

MySQL Server Unspecified Remote Arbitrary Command Execution Vulnerability

MySQL is prone to an unspecified vulnerability that allows remote attackers to execute arbitrary commands on the database.

Exploiting this issue can allow an attacker to access database content.

Very few details are currently available regarding this issue. We will update this BID as more information emerges.

This issue affects MySQL 5.0.45 and 5.0.51; other versions may also be vulnerable.

MySQL Server Unspecified Remote Arbitrary Command Execution Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NOTE: A proof-of-concept exploit has been developed but is not publicly available. Please see the references for more information.

MySQL Server Unspecified Remote Arbitrary Command Execution Vulnerability

References:

• Focus On: MySQL remote code execution (WabiSabiLabi)
  
• MySQL Homepage (Oracle)