Oval Definition:	oval:org.mitre.oval:def:7905
Revision Date: 2014-06-23 Version: 18 Title: DSA-1877 mysql-dfsg-5.0 -- denial of service/execution of arbitrary code Description: In MySQL 4.0.0 through 5.0.83, multiple format string vulnerabilities in the dispatch_command() function in libmysqld/sql_parse.cc in mysqld allow remote authenticated users to cause a denial of service (daemon crash) and potentially the execution of arbitrary code via format string specifiers in a database name in a COM_CREATE_DB or COM_DROP_DB request. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2009-2446 DSA-1877 Platform(s): Debian GNU/Linux 4.0 Debian GNU/Linux 5.0 Product(s): mysql-dfsg-5.0 Definition Synopsis Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section mysql-client is earlier than 5.0.51a-24+lenny2 OR mysql-common is earlier than 5.0.51a-24+lenny2 OR mysql-server is earlier than 5.0.51a-24+lenny2 OR Architecture dependent section Supported architectures section Installed architecture is s390 OR Installed architecture is amd64 OR Installed architecture is sparc OR Installed architecture is arm OR Installed architecture is i386 OR Installed architecture is armel OR Installed architecture is mips OR Installed architecture is ia64 OR Installed architecture is alpha OR Installed architecture is powerpc OR Installed architecture is mipsel OR Installed architecture is hppa AND Packages section libmysqlclient15-dev is earlier than 5.0.51a-24+lenny2 OR mysql-client-5.0 is earlier than 5.0.51a-24+lenny2 OR libmysqlclient15off is earlier than 5.0.51a-24+lenny2 OR mysql-server-5.0 is earlier than 5.0.51a-24+lenny2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section mysql-client is earlier than 5.0.32-7etch11 OR mysql-common is earlier than 5.0.32-7etch11 OR mysql-server is earlier than 5.0.32-7etch11 OR Architecture dependent section Supported architectures section Installed architecture is amd64 OR Installed architecture is sparc OR Installed architecture is arm OR Installed architecture is i386 OR Installed architecture is mips OR Installed architecture is alpha OR Installed architecture is powerpc OR Installed architecture is mipsel OR Installed architecture is hppa AND Packages section libmysqlclient15-dev is earlier than 5.0.32-7etch11 OR mysql-client-5.0 is earlier than 5.0.32-7etch11 OR mysql-server-4.1 is earlier than 5.0.32-7etch11 OR mysql-server-5.0 is earlier than 5.0.32-7etch11 OR libmysqlclient15off is earlier than 5.0.32-7etch11
BACK