Ubuntu: MySQL vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Ubuntu: MySQL vulnerabilities
# 1  
Old 03-20-2008
Ubuntu: MySQL vulnerabilities

LinuxSecurity.com: Masaaki Hirose discovered that MySQL could be made to dereference a NULL pointer. An authenticated user could cause a denial of service (application crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table. This issue only affects Ubuntu 6.06 and 6.10. (CVE-2006-7232) Alexander Nozdrin discovered that MySQL did not restore database access privileges when returning from SQL SECURITY INVOKER stored routines. An authenticated user could exploit this to gain privileges. This issue does not affect Ubuntu 7.10. (CVE-2007-2692)

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
DBIx::Class::Storage::DBI::mysql(3pm)			User Contributed Perl Documentation		     DBIx::Class::Storage::DBI::mysql(3pm)

NAME
DBIx::Class::Storage::DBI::mysql - Storage::DBI class implementing MySQL specifics SYNOPSIS
Storage::DBI autodetects the underlying MySQL database, and re-blesses the $storage object into this class. my $schema = MyDb::Schema->connect( $dsn, $user, $pass, { on_connect_call => 'set_strict_mode' } ); DESCRIPTION
This class implements MySQL specific bits of DBIx::Class::Storage::DBI, like AutoIncrement column support and savepoints. Also it augments the SQL maker to support the MySQL-specific "STRAIGHT_JOIN" join type, which you can use by specifying "join_type => 'straight'" in the relationship attributes It also provides a one-stop on-connect macro "set_strict_mode" which sets session variables such that MySQL behaves more predictably as far as the SQL standard is concerned. STORAGE OPTIONS
set_strict_mode Enables session-wide strict options upon connecting. Equivalent to: ->connect ( ... , { on_connect_do => [ q|SET SQL_MODE = CONCAT('ANSI,TRADITIONAL,ONLY_FULL_GROUP_BY,', @@sql_mode)|, q|SET SQL_AUTO_IS_NULL = 0|, ] }); AUTHORS
See "CONTRIBUTORS" in DBIx::Class LICENSE
You may distribute this code under the same terms as Perl itself. perl v5.14.2 2011-05-10 DBIx::Class::Storage::DBI::mysql(3pm)