RETIRED: Oracle MySQL Prior to 5.1.49 Multiple Denial Of Service Vulnerabilities
BID:42586
Info
RETIRED: Oracle MySQL Prior to 5.1.49 Multiple Denial Of Service Vulnerabilities
| Bugtraq ID: | 42586 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 09 2010 12:00AM |
| Updated: | Sep 01 2010 06:34PM |
| Credit: | Elena Stepanova, Bjorn Munch, Matthias Leich, Shane Bester, and Boris Reisig |
| Vulnerable: |
MySQL AB MySQL 5.1.48 MySQL AB MySQL 5.1.47 MySQL AB MySQL 5.1.46 MySQL AB MySQL 5.1.45 MySQL AB MySQL 5.1.44 MySQL AB MySQL 5.1.43 MySQL AB MySQL 5.1.42 MySQL AB MySQL 5.1.42 MySQL AB MySQL 5.1.41 MySQL AB MySQL 5.1.39 MySQL AB MySQL 5.1.38 MySQL AB MySQL 5.1.37 MySQL AB MySQL 5.1.36 MySQL AB MySQL 5.1.35 MySQL AB MySQL 5.1.34 MySQL AB MySQL 5.1.33 MySQL AB MySQL 5.1.32 MySQL AB MySQL 5.1.31 MySQL AB MySQL 5.1.30 MySQL AB MySQL 5.1.26 MySQL AB MySQL 5.1.23 MySQL AB MySQL 5.1.22 MySQL AB MySQL 5.1.18 MySQL AB MySQL 5.1.17 MySQL AB MySQL 5.1.16 MySQL AB MySQL 5.1.15 MySQL AB MySQL 5.1.14 MySQL AB MySQL 5.1.13 MySQL AB MySQL 5.1.12 MySQL AB MySQL 5.1.11 MySQL AB MySQL 5.1.10 MySQL AB MySQL 5.1.9 MySQL AB MySQL 5.1.8 MySQL AB MySQL 5.1.6 MySQL AB MySQL 5.1.5 MySQL AB MySQL 5.1.4 MySQL AB MySQL 5.1.3 MySQL AB MySQL 5.1.2 MySQL AB MySQL 5.1.1 8 MySQL AB MySQL 5.0.88 MySQL AB MySQL 5.0.75 MySQL AB MySQL 5.0.66 MySQL AB MySQL 5.0.63 MySQL AB MySQL 5.0.60 MySQL AB MySQL 5.0.52 MySQL AB MySQL 5.0.51 MySQL AB MySQL 5.0.50 MySQL AB MySQL 5.0.49 MySQL AB MySQL 5.0.48 MySQL AB MySQL 5.0.47 MySQL AB MySQL 5.0.46 MySQL AB MySQL 5.0.45 MySQL AB MySQL 5.0.44 MySQL AB MySQL 5.0.42 MySQL AB MySQL 5.0.40 MySQL AB MySQL 5.0.39 MySQL AB MySQL 5.0.38 MySQL AB MySQL 5.0.37 MySQL AB MySQL 5.0.36 MySQL AB MySQL 5.0.33 MySQL AB MySQL 5.0.32 MySQL AB MySQL 5.0.27 MySQL AB MySQL 5.0.26 MySQL AB MySQL 5.0.24 MySQL AB MySQL 5.0.22 -1-0.1 MySQL AB MySQL 5.0.22 MySQL AB MySQL 5.0.21 MySQL AB MySQL 5.0.20 MySQL AB MySQL 5.0.19 MySQL AB MySQL 5.0.18 MySQL AB MySQL 5.0.16 MySQL AB MySQL 5.0.15 MySQL AB MySQL 5.0.14 MySQL AB MySQL 5.0.13 MySQL AB MySQL 5.0.12 MySQL AB MySQL 5.0.11 MySQL AB MySQL 5.0.10 MySQL AB MySQL 5.0.9 MySQL AB MySQL 5.0.8 MySQL AB MySQL 5.0.7 MySQL AB MySQL 5.0.6 MySQL AB MySQL 5.0.5 MySQL AB MySQL 5.0.4 MySQL AB MySQL 5.0.3 MySQL AB MySQL 5.0.2 MySQL AB MySQL 5.0.1 MySQL AB MySQL 5.0 .0-0 MySQL AB MySQL 5.0 MySQL AB MySQL 5.1 MySQL AB MySQL 5.0.51a MySQL AB MySQL 5.0.4A MySQL AB MySQL 5.0.41 MySQL AB MySQL 5.0.3A MySQL AB MySQL 5.0.3 Beta MySQL AB MySQL 5.0.20A MySQL AB MySQL 5.0.1A MySQL AB MySQL 5.0.17A MySQL AB MySQL 5.0.17 MySQL AB MySQL 5.0.16A MySQL AB MySQL 5.0.15A MySQL AB MySQL 5.0.10A MySQL AB MySQL 5.0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 |
| Not Vulnerable: |
MySQL AB MySQL 5.1.49 |
Exploit / POC
RETIRED: Oracle MySQL Prior to 5.1.49 Multiple Denial Of Service Vulnerabilities
Attackers can exploit these issues using readily available tools.
The following examples are available:
Attackers can exploit these issues using readily available tools.
The following examples are available:
Solution / Fix
RETIRED: Oracle MySQL Prior to 5.1.49 Multiple Denial Of Service Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
Mandriva Linux Mandrake 2010.0
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
-
Mandriva lib64mysql-devel-5.1.46-4.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva lib64mysql-static-devel-5.1.46-4.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva lib64mysql16-5.1.46-4.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-5.1.46-4.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-bench-5.1.46-4.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-client-5.1.46-4.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-common-5.1.46-4.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-common-core-5.1.46-4.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-core-5.1.46-4.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-plugin_pbxt-1.0.10-13.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-plugin_pinba-0.0.5-13.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-plugin_revision-0.1-13.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-plugin_sphinx-0.9.9-13.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-plugin_spider-2.13-13.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2010.0
-
Mandriva libmysql-devel-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva libmysql-static-devel-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva libmysql16-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-bench-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-client-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-common-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-common-core-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-core-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-doc-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-max-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-ndb-extra-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-ndb-management-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-ndb-storage-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva mysql-ndb-tools-5.1.42-0.6mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/
References
RETIRED: Oracle MySQL Prior to 5.1.49 Multiple Denial Of Service Vulnerabilities
References:
References:
- Bug #52512 Assertion `! is_set()' in Diagnostics_area::set_ok_status on LOAD DAT (Elena Stepanova)
- Bug #52711 Segfault when doing EXPLAIN SELECT with union...order by (select... w (Bjorn Munch)
- Bug #54007 assert in ha_myisam::index_next , HANDLER (Matthias Leich)
- Bug #54044 Create temporary tables and using innodb crashes. (Boris Reisig)
- Bug #54393 crash and/or valgrind errors in mysql_client_binlog_statement (Shane Bester)
- Bug #54477 Crash on IN / CASE with NULL arguments (Shane Bester)
- Bug #54575 crash when joining tables with unique set column (Shane Bester)
- C.1.2. Changes in MySQL 5.1.49 (09 July 2010) (MySQL AB)
- MySQL Homepage (Oracle)