Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Gentoo Local Security Checks >> [GLSA-200608-09] MySQL: Denial of Service


Vulnerability Assessment Details

[GLSA-200608-09] MySQL: Denial of Service

Vulnerability Assessment Summary
MySQL: Denial of Service

Detailed Explanation for this Vulnerability Assessment
The remote host is affected by the vulnerability described in GLSA-200608-09
(MySQL: Denial of Service)


Jean-David Maillefer discovered a format string vulnerability in
time.cc where MySQL fails to properly handle specially formatted user
input to the date_format function.

Impact

By specifying a format string as the first parameter to the date_format
function, an authenticated attacker could cause MySQL to crash,
resulting in a Denial of Service.

Workaround

There is no known workaround at this time.

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3469


Solution:
All MySQL users should upgrade to the latest version:
# emerge --sync
# emerge --ask --verbose --oneshot ">=dev-db/mysql-4.1.21"


Network Security Threat Level: Medium


Networks Security ID:

Vulnerability Assessment Copyright: (C) 2006 Michel Arboi

Cables, Connectors


IBM Power8 S822L 20-Core 3.42GHz 256Gb 1.2Tb 10GbE 2U Linux Server - 8247-22L picture

IBM Power8 S822L 20-Core 3.42GHz 256Gb 1.2Tb 10GbE 2U Linux Server - 8247-22L

$519.96



IBM CS821 20-Core 2.827GHz 128Gb 1.92Tb SSD 1U Linux Server - 8005-12N Power 8 picture

IBM CS821 20-Core 2.827GHz 128Gb 1.92Tb SSD 1U Linux Server - 8005-12N Power 8

$479.96



IBM E850 Power8 2x 12C 3.02GHz 512Gb 1.8Tb SAS 10GbE 16Gb Linux Server 8408-E8E picture

IBM E850 Power8 2x 12C 3.02GHz 512Gb 1.8Tb SAS 10GbE 16Gb Linux Server 8408-E8E

$799.96



6x Fedora Linux Computer Sticker Decals Desktop Laptop Server Badge Decal Vinyl picture

6x Fedora Linux Computer Sticker Decals Desktop Laptop Server Badge Decal Vinyl

$2.99



Red Hat Enterprise Linux 5 Server - New and Sealed picture

Red Hat Enterprise Linux 5 Server - New and Sealed

$19.99



Red Hat Enterprise Linux 5 Server RHF032US-R1 NEW Sealed picture

Red Hat Enterprise Linux 5 Server RHF032US-R1 NEW Sealed

$59.95



6x Powered By Linux Computer Sticker Decals Desktop Laptop Server Badge Decal picture

6x Powered By Linux Computer Sticker Decals Desktop Laptop Server Badge Decal

$2.99



IBM Power 9 S922 8-Core 3.4-3.9Ghz 128Gb DDR4 2U Linux Server - 9009-22a picture

IBM Power 9 S922 8-Core 3.4-3.9Ghz 128Gb DDR4 2U Linux Server - 9009-22a

$3439.96



IBM System X 3250 M5 Single Xeon Quad Core E3-1220 v3 @3.1GHz,8GB RAM,Linux SUSE picture

IBM System X 3250 M5 Single Xeon Quad Core E3-1220 v3 @3.1GHz,8GB RAM,Linux SUSE

$199.87



Router Firewall DHCP DNS Server pfsense opnsense 6x 10GB Ethernet Port AES-NII picture

Router Firewall DHCP DNS Server pfsense opnsense 6x 10GB Ethernet Port AES-NII

$149.00



Discussions

No Discussions have been posted on this vulnerability.