Arbitrary Code Execution in mysql-dfsg-5.0
Summary
DSA-1877-1: mysql-dfsg-5.0 - arbitrary code. Affects mysql-dfsg-5.0 versions < 5.0.32-7etch11. Fixed in 5.0.32-7etch11. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mysql-dfsg-5.0 is a package in the Debian ecosystem that provides the MySQL database server. It is widely used for managing relational databases and is known for its performance, scalability, and robustness. However, versions 4.0.0 through 5.0.83 of mysql-dfsg-5.0 are vulnerable to arbitrary code execution due to multiple format string vulnerabilities in the dispatch_command() function. These vulnerabilities can be exploited by remote authenticated users to crash the daemon and potentially execute arbitrary code by using format string specifiers in a database name in a COM_CREATE_DB or COM_DROP_DB request.
Vulnerability Detail
The vulnerability in mysql-dfsg-5.0 allows remote authenticated users to cause a denial of service (daemon crash) and potentially execute arbitrary code. By exploiting the format string vulnerabilities in the dispatch_command() function, an attacker can manipulate the database name in a COM_CREATE_DB or COM_DROP_DB request to inject malicious code. This can lead to the execution of arbitrary commands with the privileges of the MySQL server, potentially compromising the entire system. The vulnerability has been assigned the CVE identifier CVE-2009-2446.
How To Fix
Minimum fixed version
5.0.32-7etch11
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mysql-dfsg-5.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fix by upgrading to the patched versions of mysql-dfsg-5.0.
Conclusion
The vulnerability in mysql-dfsg-5.0 can lead to arbitrary code execution and should be addressed by upgrading to the fixed versions of the package. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for mysql-dfsg-5.0 →
FAQ
mysql-dfsg-5.0 is a package in the Debian ecosystem that provides the MySQL database server.
Versions 4.0.0 through 5.0.83 of mysql-dfsg-5.0 are affected by this vulnerability.
Remote authenticated users can exploit the vulnerability by using format string specifiers in a database name in a COM_CREATE_DB or COM_DROP_DB request.
The vulnerability can result in a denial of service (daemon crash) and potentially allow remote attackers to execute arbitrary code with the privileges of the MySQL server.
Yes, this vulnerability has been assigned the CVE identifier CVE-2009-2446.
Related vulnerabilities
Recent vulnerabilities recorded for mysql-dfsg-5.0.
