Advisories (MDKSA-2006:111 ): MySQL

[aru]

Mandriva Advisories MDKSA-2006:111 : MySQL

 

Updated MySQL packages fixes authorized user DoS(crash) vulnerability.

June 23rd, 2006

 

Mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before

 

5.1.6 allows remote authorized users to cause a denial of service (crash)

 

via a NULL second argument to the str_to_date function.

 

 

 

MySQL 4.0.18 in Corporate 3.0 and MNF 2.0 is not affected by this issue.

 

 

 

Packages have been patched to correct this issue.

 

 

The released versions of Mandriva GNU/Linux affected are:

• 10.2
  
• 2006.0
  

Full information about this advisory, including the updated packages, is available at:

www.mandriva.com/security/advisories?name=MDKSA-2006:111

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3081

 

Posted automatically by aru (mdksec2mub v: mdksec2mub,v 1.2 2006/06/01 20:04:28 pituko Exp $)