MySQL libmysqlclient Library mysql_real_connect() Buffer Overrun Vulnerability
BID:7887
Info
MySQL libmysqlclient Library mysql_real_connect() Buffer Overrun Vulnerability
| Bugtraq ID: | 7887 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 12 2003 12:00AM |
| Updated: | Jun 12 2003 12:00AM |
| Credit: | This vulnerability was reported by pokleyzz <[email protected]>. |
| Vulnerable: |
MySQL AB MySQL 4.0.13 MySQL AB MySQL 4.0.12 MySQL AB MySQL 4.0.11 MySQL AB MySQL 4.0.10 MySQL AB MySQL 4.0.9 MySQL AB MySQL 4.0.8 MySQL AB MySQL 4.0.7 MySQL AB MySQL 4.0.6 MySQL AB MySQL 4.0.5 MySQL AB MySQL 4.0.4 MySQL AB MySQL 4.0.3 MySQL AB MySQL 4.0.2 MySQL AB MySQL 4.0.1 MySQL AB MySQL 4.0 .0 |
| Not Vulnerable: | |
Discussion
MySQL libmysqlclient Library mysql_real_connect() Buffer Overrun Vulnerability
A vulnerability has been reported for MySQL libmysqlclient library. The problem is said to occur in the mysql_real_connect() function and is likely due to insufficient bounds checking of user-supplied parameters.
An attacker could potentially be capable of exploiting this issue to execute arbitrary code on a remote system. It should be noted that this issue would be required to be used in conjunction with an unrelated SQL injection attack or possibly used on a system which allows for the uploading of scripts.
A vulnerability has been reported for MySQL libmysqlclient library. The problem is said to occur in the mysql_real_connect() function and is likely due to insufficient bounds checking of user-supplied parameters.
An attacker could potentially be capable of exploiting this issue to execute arbitrary code on a remote system. It should be noted that this issue would be required to be used in conjunction with an unrelated SQL injection attack or possibly used on a system which allows for the uploading of scripts.
Exploit / POC
MySQL libmysqlclient Library mysql_real_connect() Buffer Overrun Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
MySQL libmysqlclient Library mysql_real_connect() Buffer Overrun Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
MySQL libmysqlclient Library mysql_real_connect() Buffer Overrun Vulnerability
References:
References:
- MySQL Homepage (Oracle)