Nom du paquet
MYSQL
Date
2003-02-03
Advisory ID
MDKSA-2003:013
Affected versions
8.1 i586 , SNF7.2 i586 , 8.1 i586 , 8.0 i586 , 9.0 i586 , 8.2 i586 , 8.0 i586 , 8.2 i586 , 7.2 i586

Problem description

Aleksander Adamowski informed MandrakeSoft that the MySQL developers fixed a DoS vulnerability in the recently released 3.23.55 version of MySQL. A double free() pointer bug in the mysql_change_user() handling would allow a specially hacked mysql client to crash the main mysqld server. This vulnerability can only be exploited by first logging in with a valid user account.

Updated packages

8.1 i586

 e421b83e8476b59a64dae5d3ebb9c208  ia64/8.1/RPMS/MySQL-3.23.41-5.3mdk.ia64.rpm
5d78fccdeb0876e5441287b5dc77cc53  ia64/8.1/RPMS/MySQL-bench-3.23.41-5.3mdk.ia64.rpm
59d604e7dfb6ac945d2f0f05eaec0a57  ia64/8.1/RPMS/MySQL-client-3.23.41-5.3mdk.ia64.rpm
1a59779bd26b2480b6913741dc8ee5b1  ia64/8.1/RPMS/MySQL-devel-3.23.41-5.3mdk.ia64.rpm
3f4c5e8bef6445f8a1ce037a3b8213fa  ia64/8.1/RPMS/MySQL-shared-3.23.41-5.3mdk.ia64.rpm
a8ba59c7fe788779b97af683db9b08b8  ia64/8.1/SRPMS/MySQL-3.23.41-5.3mdk.src.rpm

SNF7.2 i586

 011ff58636683ca1bb7cac749ff3ce7b  snf7.2/RPMS/MySQL-client-3.23.31-1.4mdk.i586.rpm
bba1a15efda972301ae58e46d1cd6e50  snf7.2/RPMS/MySQL-shared-3.23.31-1.4mdk.i586.rpm
8074361a2cd9175d09f59f1c6cde4a8f  snf7.2/SRPMS/MySQL-3.23.31-1.4mdk.src.rpm

8.1 i586

 8c41c02e9154202ee24b4a6c7dd2d5d8  8.1/RPMS/MySQL-3.23.41-5.3mdk.i586.rpm
efe74fb794a8ed7d0069f075b8ccc892  8.1/RPMS/MySQL-bench-3.23.41-5.3mdk.i586.rpm
8027c12246c3c07137f7507ed3643177  8.1/RPMS/MySQL-client-3.23.41-5.3mdk.i586.rpm
bae66fe96c1d1756cc562e932a11f323  8.1/RPMS/MySQL-devel-3.23.41-5.3mdk.i586.rpm
c78af586765e35becd9af176b1253626  8.1/RPMS/MySQL-shared-3.23.41-5.3mdk.i586.rpm
a8ba59c7fe788779b97af683db9b08b8  8.1/SRPMS/MySQL-3.23.41-5.3mdk.src.rpm

8.0 i586

 dc68630b7783c0ecf551473af42bf159  8.0/RPMS/MySQL-3.23.36-2.3mdk.i586.rpm
8332df1f032f310aa53972736f69a707  8.0/RPMS/MySQL-bench-3.23.36-2.3mdk.i586.rpm
080e914452e2d64abfefb96020d07f9e  8.0/RPMS/MySQL-client-3.23.36-2.3mdk.i586.rpm
fe480408a68c32f442322625ac040c6c  8.0/RPMS/MySQL-devel-3.23.36-2.3mdk.i586.rpm
c058662eb300a6e2589ab0a512638d3e  8.0/RPMS/MySQL-shared-3.23.36-2.3mdk.i586.rpm
7a2aeac7740ecc34db7a794c6928fbcb  8.0/SRPMS/MySQL-3.23.36-2.3mdk.src.rpm

9.0 i586

 04000c84cfc2c86923ef61b11948dfe6  9.0/RPMS/libmysql10-3.23.52-1.3mdk.i586.rpm
9948baccb444b39f76897aa8f5777cb8  9.0/RPMS/libmysql10-devel-3.23.52-1.3mdk.i586.rpm
cefb16d65faf472ea479ab5b77ac9b91  9.0/RPMS/MySQL-3.23.52-1.3mdk.i586.rpm
599910eab67704489f360b569d2a1eb6  9.0/RPMS/MySQL-Max-3.23.52-1.3mdk.i586.rpm
369ea8520e4207160e5655575f74da86  9.0/RPMS/MySQL-bench-3.23.52-1.3mdk.i586.rpm
ba34172fbaa94f5a5c125c62dd1b0abe  9.0/RPMS/MySQL-client-3.23.52-1.3mdk.i586.rpm
c2ceb1881525baeaff85c554376b6247  9.0/SRPMS/MySQL-3.23.52-1.3mdk.src.rpm

8.2 i586

 ec6dbc415b424a25c29909b984de64ce  8.2/RPMS/libmysql10-3.23.47-5.3mdk.i586.rpm
c18da1c2d5cede8022a26b875c09b136  8.2/RPMS/libmysql10-devel-3.23.47-5.3mdk.i586.rpm
3c283667d8175ff75b183254f8535ec6  8.2/RPMS/MySQL-3.23.47-5.3mdk.i586.rpm
eab6e4de9ef2de755e67f796fafd4ccd  8.2/RPMS/MySQL-bench-3.23.47-5.3mdk.i586.rpm
639e03c66d6fbd8059d33a481b6ff9d9  8.2/RPMS/MySQL-client-3.23.47-5.3mdk.i586.rpm
394487ebcf063f310eb7719d637b26da  8.2/SRPMS/MySQL-3.23.47-5.3mdk.src.rpm

8.0 i586

 926ee5252994fe0a29524121103725d5  ppc/8.0/RPMS/MySQL-3.23.36-2.3mdk.ppc.rpm
cdfa13b86f231bc8caf1ac14ba2b0db3  ppc/8.0/RPMS/MySQL-bench-3.23.36-2.3mdk.ppc.rpm
27de6cbecb726095e345cc9866908520  ppc/8.0/RPMS/MySQL-client-3.23.36-2.3mdk.ppc.rpm
263ff27104820e6413c0758627c6d283  ppc/8.0/RPMS/MySQL-devel-3.23.36-2.3mdk.ppc.rpm
d74e18d7baf1d4b91cdc7fe6acdd7c43  ppc/8.0/RPMS/MySQL-shared-3.23.36-2.3mdk.ppc.rpm
7a2aeac7740ecc34db7a794c6928fbcb  ppc/8.0/SRPMS/MySQL-3.23.36-2.3mdk.src.rpm

8.2 i586

 dbbe494b3581f8fbdd663acf0ff321ff  ppc/8.2/RPMS/libmysql10-3.23.47-5.3mdk.ppc.rpm
39d434dfefe8dcb505ea13d001ab43f6  ppc/8.2/RPMS/libmysql10-devel-3.23.47-5.3mdk.ppc.rpm
ef09c1c6cf68f09cf8798635a4f7aea6  ppc/8.2/RPMS/MySQL-3.23.47-5.3mdk.ppc.rpm
f714db18658d1079354ca66a9c38c718  ppc/8.2/RPMS/MySQL-bench-3.23.47-5.3mdk.ppc.rpm
3ea6463cb34fcfcb9fb12d86f1bcc2a8  ppc/8.2/RPMS/MySQL-client-3.23.47-5.3mdk.ppc.rpm
394487ebcf063f310eb7719d637b26da  ppc/8.2/SRPMS/MySQL-3.23.47-5.3mdk.src.rpm

7.2 i586

 d255ec5924b03b9fab09f03ca062bd27  7.2/RPMS/MySQL-3.23.31-1.4mdk.i586.rpm
f16b49bcf928ab167b2a00e90a9edf11  7.2/RPMS/MySQL-bench-3.23.31-1.4mdk.i586.rpm
011ff58636683ca1bb7cac749ff3ce7b  7.2/RPMS/MySQL-client-3.23.31-1.4mdk.i586.rpm
46f2240f11cc2e31207b2303965f8cc5  7.2/RPMS/MySQL-devel-3.23.31-1.4mdk.i586.rpm
bba1a15efda972301ae58e46d1cd6e50  7.2/RPMS/MySQL-shared-3.23.31-1.4mdk.i586.rpm
8074361a2cd9175d09f59f1c6cde4a8f  7.2/SRPMS/MySQL-3.23.31-1.4mdk.src.rpm

References