• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

MySQL Remote Information Disclosure and Buffer Overflow Vulnerabilities

Solution:
The vendor has released MySQL 5.0.21 to address these issues. MySQL 4.0.27, 4.1.19, and 5.1.10 are also scheduled to be released in the future.

Please see the referenced advisories for information on obtaining and applying fixes.


Apple Mac OS X Server 10.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.1

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.3

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.5

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.7

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.8

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

MySQL AB MySQL 4.0.18

• Mandriva lib64mysql12-4.0.18-1.9.C30mdk.x86_64.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva lib64mysql12-devel-4.0.18-1.9.C30mdk.x86_64.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libmysql12-4.0.18-1.9.C30mdk.i586.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libmysql12-4.0.18-1.9.M20mdk.i586.rpm
  Multi Network Firewall 2.0:
  http://www.mandriva.com/en/download


• Mandriva libmysql12-devel-4.0.18-1.9.C30mdk.i586.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-4.0.18-1.9.C30mdk.i586.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-4.0.18-1.9.C30mdk.src.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-4.0.18-1.9.C30mdk.x86_64.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-4.0.18-1.9.M20mdk.src.rpm
  Multi Network Firewall 2.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-bench-4.0.18-1.9.C30mdk.i586.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-bench-4.0.18-1.9.C30mdk.x86_64.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-client-4.0.18-1.9.C30mdk.i586.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-client-4.0.18-1.9.C30mdk.x86_64.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-common-4.0.18-1.9.C30mdk.i586.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-common-4.0.18-1.9.C30mdk.x86_64.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-Max-4.0.18-1.9.C30mdk.i586.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva MySQL-Max-4.0.18-1.9.C30mdk.x86_64.rpm
  Mandriva Linux Corporate 3.0:
  http://www.mandriva.com/en/download


• SuSE mysql-4.0.18-32.23.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/mysql-4.0.18-32.2 3.i586.rpm


• SuSE mysql-4.0.18-32.23.x86_64.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/mysql-4.0.18- 32.23.x86_64.rpm


• SuSE mysql-Max-4.0.18-32.26.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/mysql-Max-4.0.18- 32.26.i586.rpm


• SuSE mysql-Max-4.0.18-32.26.x86_64.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/mysql-Max-4.0 .18-32.26.x86_64.rpm

MySQL AB MySQL 4.1.13

• SuSE mysql-4.1.13-3.4.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/mysql-4.1.13-3.4 .i586.rpm


• SuSE mysql-4.1.13-3.4.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/mysql-4.1.13-3.4. ppc.rpm


• SuSE mysql-4.1.13-3.4.ppc64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc64/mysql-4.1.13-3. 4.ppc64.rpm


• SuSE mysql-4.1.13-3.4.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/mysql-4.1.13-3 .4.x86_64.rpm


• Trustix mysql-4.1.15-2tr.i586.rpm
  TSL 3.0 mysql
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix mysql-bench-4.1.15-2tr.i586.rpm
  TSL 3.0 mysql
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix mysql-client-4.1.15-2tr.i586.rpm
  TSL 3.0 mysql
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix mysql-devel-4.1.15-2tr.i586.rpm
  TSL 3.0 mysql
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix mysql-libs-4.1.15-2tr.i586.rpm
  TSL 3.0 mysql
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix mysql-shared-4.1.15-2tr.i586.rpm
  TSL 3.0 mysql
  ftp://ftp.trustix.org/pub/trustix/updates

MySQL AB MySQL 5.0.2

• MySQL AB mysql-5.0.21.tar.gz
  http://dev.mysql.com/get/Downloads/MySQL-5.0/mysql-5.0.21.tar.gz/from/ pick

MySQL AB MySQL 5.0.20

• MySQL AB mysql-5.0.21.tar.gz
  http://dev.mysql.com/get/Downloads/MySQL-5.0/mysql-5.0.21.tar.gz/from/ pick