(Sun Issues Fix) MySQL May Let Remote Authenticated Users Access Restricted Tables or Crash the System
|
|
SecurityTracker Alert ID: 1014671 |
|
SecurityTracker URL: http://securitytracker.com/id/1014671
|
|
CVE Reference:
CVE-2004-0835, CVE-2004-0837
(Links to External Site)
|
Date: Aug 13 2005
|
Impact:
Denial of service via network, User access via local system
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 3.23
|
Description:
Two vulnerabilities were reported in MySQL. A remote authenticated user may be able to gain elevated privileges. A remote authenticated user may be able to cause denial of service conditions.
In March 2004, Oleksandr Byelkin reported that an 'alter table [...] rename [...]' command will check the create/insert rights of the old table instead of the new table [CVE: CAN-2004-0835]. As a result, a user may be able to gain access to tables that the user is not authorized to access.
In January 2004, Dean Ellis reported that if multiple threads issue 'alter' commands against 'merge' tables to modify the 'union', the target server may crash [CVE: CAN-2004-0837].
The original bug reports are available at:
http://bugs.mysql.com/bug.php?id=3270
http://bugs.mysql.com/bug.php?id=2408
|
Impact:
A remote authenticated user may be able to gain elevated privileges.
A remote authenticated user may be able to cause denial of service conditions.
|
Solution:
Sun has issued the following fixes.
SPARC Platform
* Solaris 10 with patch 120292-01 or later
x86 Platform
* Solaris 10 with patch 120293-01 or later
|
Vendor URL: sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1 (Links to External Site)
|
Cause:
Access control error, Exception handling error, State error
|
Underlying OS:
UNIX (Solaris - SunOS)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Sat, 13 Aug 2005 00:54:53 -0400
Subject: http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
|
# Sun Alert ID: 101864
# Synopsis: Multiple Security Vulnerabilities in The "MySQL" Package
# Category: Security
#
Product: Solaris 10 Operating System
# BugIDs: 6258187
# Avoidance: Patch
# State: Resolved
# Date Released: 11-Aug-2005
# Date Closed: 11-Aug-2005
# Date Modified:
CVE: CAN-2004-0835, CAN-2004-0837, CAN-2005-0004, CAN-2005-0709, CAN-2005-0710,
CAN-2005-0711
|
|
