Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

Mandriva: Updated mysql packages fix vulnerabilities

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Mandriva: Updated mysql packages fix vulnerabilities
# 1  
Old 07-21-2008
Mandriva: Updated mysql packages fix vulnerabilities
LinuxSecurity.com: Multiple buffer overflows in yaSSL, which is used in MySQL, allowed remote attackers to execute arbitrary code (CVE-2008-0226) or cause a denial of service via a special Hello packet (CVE-2008-0227). Sergei Golubchik found that MySQL did not properly validate optional data or index directory paths given in a CREATE TABLE statement; as well it would not, under certain conditions, prevent two databases from using the same paths for data or index files. This could allow an authenticated user with appropriate privilege to create tables in one database to read and manipulate data in tables later created in other databases, regardless of GRANT privileges (CVE-2008-2079). The updated packages have been patched to correct these issues.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT CENTOS

pmdamysql

PMDAMYSQL(1)						       Performance Co-Pilot						      PMDAMYSQL(1)

NAME

       pmdamysql - MySQL database PMDA

DESCRIPTION

       pmdamysql is a Performance Co-Pilot PMDA which extracts live performance data from a running MySQL database.

INSTALLATION

       pmdamysql uses a configuration file from (in this order):

       o   /etc/pcpdbi.conf

       o   $PCP_PMDAS_DIR/mysql/mysql.conf

       This file can contain overridden values (Perl code) for the settings listed at the start of pmdamysql.pl, namely:

       o   database name (see DBI(3) for details)

       o   database user name

       o   database pass word

       Once this is setup, you can access the names and values for the mysql performance metrics by doing the following as root:

	       # cd $PCP_PMDAS_DIR/mysql
	       # ./Install

       If you want to undo the installation, do the following as root:

	       # cd $PCP_PMDAS_DIR/mysql
	       # ./Remove

       pmdamysql is launched by pmcd(1) and should never be executed directly.	The Install and Remove scripts notify pmcd(1) when the agent is
       installed or removed.

Binary Status values in text
       Some of the status values are in the form of YES/NO or ON/OFF.

       Since these cannot be intepreted by tools like PMIE, they have been duplicated with a _num extension and the values of 1 (YES/ON) or 0
       (NO/OFF).

   Eg:
       o   mysql.slave_status.slave_io_running

       o   mysql.slave_status.slave_io_running_num

FILES

       /etc/pcpdbi.conf
	   configuration file for all PCP database monitors

       $PCP_PMDAS_DIR/mysql/mysql.conf
	   configuration file for pmdamysql

       $PCP_PMDAS_DIR/mysql/Install
	   installation script for the pmdamysql agent

       $PCP_PMDAS_DIR/mysql/Remove
	   undo installation script for the pmdamysql agent

       $PCP_LOG_DIR/pmcd/mysql.log
	   default log file for error messages from pmdamysql

SEE ALSO

       pmcd(1), pmdadbping.pl(1) and DBI(3).  # vi: sw=4 ts=4 et:

3.8.10							       Performance Co-Pilot						      PMDAMYSQL(1)