SECUNIA ADVISORY ID: SA39792

VERIFY ADVISORY: http://secunia.com/advisories/39792/

DESCRIPTION: Some vulnerabilities have been reported in MySQL, which can be exploited by malicious users to bypass certain security restrictions or potentially compromise a vulnerable system and by malicious people to cause a DoS (Denial of Service). Successful exploitation of this vulnerability may allow execution of arbitrary code. The vulnerabilities are reported in versions prior to 5.1.47.

1) An error exists when processing the table name argument of a COM_FIELD_LIST command packet. This can be exploited to bypass privilege checks and e.g. read or delete content from a database table on the system by passing a specially crafted table name argument to COM_FIELD_LIST.

2) An unspecified error in the processing of packets can be exploited to cause a locked server state if a packet larger than the maximum size of one packet is received.

3) A boundary error when processing COM_FIELD_LIST command packets can be exploited to cause buffer overflow by passing an overly long table name argument to COM_FIELD_LIST.

SOLUTION: The vulnerabilities will be fixed in version 5.1.47.

PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.

ORIGINAL ADVISORY: MySQL: http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html