Oval Definition:	oval:org.mitre.oval:def:11857
Revision Date: 2013-04-29 Version: 12 Title: Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information. Description: Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-2446 Platform(s): CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section mysql is earlier than 0:4.1.22-2.el4_8.3 OR mysql-devel is earlier than 0:4.1.22-2.el4_8.3 OR mysql-bench is earlier than 0:4.1.22-2.el4_8.3 OR mysql-server is earlier than 0:4.1.22-2.el4_8.3 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section mysql is earlier than 0:5.0.77-3.el5 OR mysql-devel is earlier than 0:5.0.77-3.el5 OR mysql-test is earlier than 0:5.0.77-3.el5 OR mysql-bench is earlier than 0:5.0.77-3.el5 OR mysql-server is earlier than 0:5.0.77-3.el5
BACK