Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

Mandriva: Updated mysql packages fix vulnerabilities

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Mandriva: Updated mysql packages fix vulnerabilities
# 1  
Old 07-21-2008
Mandriva: Updated mysql packages fix vulnerabilities
LinuxSecurity.com: Multiple buffer overflows in yaSSL, which is used in MySQL, allowed remote attackers to execute arbitrary code (CVE-2008-0226) or cause a denial of service via a special Hello packet (CVE-2008-0227). Sergei Golubchik found that MySQL did not properly validate optional data or index directory paths given in a CREATE TABLE statement; as well it would not, under certain conditions, prevent two databases from using the same paths for data or index files. This could allow an authenticated user with appropriate privilege to create tables in one database to read and manipulate data in tables later created in other databases, regardless of GRANT privileges (CVE-2008-2079). The updated packages have been patched to correct these issues.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

cvm-mysql

cvm-mysql(8)						      System Manager's Manual						      cvm-mysql(8)

NAME

       cvm-mysql - MySQL module

SYNOPSIS

       cvm-mysql

CREDENTIALS

       Pass phrase

DESCRIPTION

       This module queries a MySQL database for the account name, compares the stored pass phrase with the given one using crypt(3).

CONFIGURATION VARIABLES

       CVM_MYSQL_DEFAULT_FILE
	      The  full  path of the defaults file to read if the following variable is set.  If not set, the file $HOME/.my.cnf will be read (the
	      MySQL default).

       CVM_MYSQL_DEFAULT_GROUP
	      If set, the module will read connection default options from the named group in the defaults file as above

       CVM_MYSQL_HOST
	      The hostname or IP of the MySQL server.  If not set, a connection to the local host is assumed.

       CVM_MYSQL_USER
	      The MySQL login ID to connect as.  If not set, the invoking user is assumed.

       CVM_MYSQL_PASS
	      The password for the above user.

       CVM_MYSQL_DB
	      The database name, must be set.

       CVM_MYSQL_PORT
	      The port number for the TCP/IP connection (only used if the server is not local).

       CVM_MYSQL_POSTQ (optional)
	      The SQL query to execute after the credentials have been validated, see cvm-sql(7).

       CVM_MYSQL_PWCMP (optional)
	      The password comparison module to use.

       CVM_MYSQL_SOCKET
	      The path to the socket that should be used for connections to a local server.

       CVM_MYSQL_QUERY (optional)
	      The SQL query to issue to retrieve the row containing the account information from the database, see cvm-sql(7).

SEE ALSO

       cvm-sql(7), cvm-pgsql(8), cvm-pwfile(8), cvm-qmail(8), cvm-unix(8), cvm-vmailmgr(8),  cvm-benchclient(8),  cvm-checkpassword(8),  cvm-test-
       client(8)

	http://untroubled.org/pwcmp/pwcmp.html
	http://untroubled.org/cvm/cvm.html

																      cvm-mysql(8)