openSUSE Security Update : libmysqlclient-devel (libmysqlclient-devel-1116)

the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks CVE-2008-4456 - fix slave reconnect %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : libmysqlclient-devel (libmysqlclient-devel-1116)

the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks CVE-2008-4456 - fix slave reconnect %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : libmysqlclient-devel (libmysqlclient-devel-210)

Empty bit-strings in a query could crash the MySQL server CVE-2008-3963. Due to another flaw users could access tables of other users CVE-2008-4097, CVE-2008-4098. This update also fixes problems with the 'ORDER BY' query %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-5619)

Empty bit-strings in a query could crash the MySQL server CVE-2008-3963. Due to another flaw users could access tables of other users CVE-2008-4097, CVE-2008-4098. This update also fixes the previously broken mysqlhotcopy script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

FreeBSD Ports: mysql-server, mysql-client

The remote host is missing an update to the system as announced in the referenced advisory. VID 77420ebb-0cf4-11d9-8a8a-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-5341)

The database server MySQL was updated to fix a security problem : CVE-2008-2079: MySQL allowed local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory, whic...

openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-4873)

This update fixes several security vulnerabilities note: not all versions are affected by every bug : - CVE-2007-2583 - CVE-2007-2691 - CVE-2007-2692 - CVE-2007-5925 - CVE-2007-5969 - CVE-2007-6303 - CVE-2007-6304 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

CVE-2004-2149

CVE-2004-2149 describes a buffer overflow in the prepared statements API of libmysqlclient used by MySQL 4.1.3 beta and 4.1.4. The flaw allows remote denial of service when processing a large number of placeholders. Public references imply the issue exists in older 4.1.x series and could crash th...

mysql -- heap buffer overflow with prepared statements

There is a buffer overflow in the prepared statements API libmysqlclient when a statement containing thousands of placeholders is executed...

security flaw

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the 1 readrows or 2 readonerow routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code...

security flaw

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the 1 readrows or 2 readonerow routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2002-1376

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the 1 readrows or 2 readonerow routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2002-1376

CVE-2002-1376 affects the libmysqlclient library in MySQL 3.x up to 3.23.54 and 4.x up to 4.0.6. The root cause is improper verification of length fields for responses in the read_rows or read_one_row routines, which can allow a remote attacker to cause a denial of service and potentially execute...