[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
UNIRAS Brief - 260/05 - Conectiva - Fixes for several mysql vulnerabilities [CLA-2005:946]
-----BEGIN PGP SIGNED MESSAGE-----
- ----------------------------------------------------------------------------------
UNIRAS (UK Govt CERT) Briefing Notice - 260/05 dated 05.04.05 Time: 15:07
UNIRAS is part of NISCC (National Infrastructure Security Co-ordination Centre)
- ----------------------------------------------------------------------------------
UNIRAS material is also available from its website at www.uniras.gov.uk and
Information about NISCC is available from www.niscc.gov.uk
- ----------------------------------------------------------------------------------
Title
=====
Conectiva - Fixes for several mysql vulnerabilities [CLA-2005:946]
Detail
======
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- - --------------------------------------------------------------------------
PACKAGE : MySQL
SUMMARY : Fixes for several mysql vulnerabilities
DATE : 2005-04-04 13:52:00
ID : CLA-2005:946
RELEVANT
RELEASES : 9, 10
- - -------------------------------------------------------------------------
DESCRIPTION
MySQL[1] is a very popular SQL database.
This announcement fixes several vulnerabilities discovered in MySQL:
1.CAN-2005-0709[2]
MySQL allowed remote authenticated users with INSERT and DELETE
privileges on 'mysql' administrative database to execute arbitrary
code by using CREATE FUNCTION to access libc calls.
2.CAN-2005-0710[3]
MySQL allowed remote authenticated users with INSERT and DELETE
privileges on 'mysql' administrative database to bypass library path
restrictions and execute arbitrary libraries by using INSERT INTO to
modify the mysql.func table, which is processed by the udf_init
function.
3.CAN-2005-0711[4]
MySQL used predictable file names when creating temporary tables,
which allowed local users with CREATE TEMPORARY TABLE privileges to
overwrite arbitrary files via a symlink attack.
SOLUTION
We recommend that all MySQL users upgrade their packages as soon as
possible.
IMPORTANT: after the upgrade at Conectiva Linux 9, the mysql service
must be restarted manually. In order to do that, run the following
command as root:
# /sbin/service mysql restart
REFERENCES
1.http://www.mysql.com/products/mysql/
2.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0709
3.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0710
4.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0711
UPDATED PACKAGES
ftp://atualizacoes.conectiva.com.br/10/SRPMS/mysql-4.0.15-62448U10_2cl.src.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libmysqlclient-devel-4.0.15-62448U10_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libmysqlclient-devel-static-4.0.15-62448U10_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libmysqlclient12-4.0.15-62448U10_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/mysql-4.0.15-62448U10_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/mysql-bench-4.0.15-62448U10_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/mysql-client-4.0.15-62448U10_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/mysql-doc-4.0.15-62448U10_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/SRPMS/MySQL-3.23.58-20507U90_3cl.src.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/MySQL-3.23.58-20507U90_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/MySQL-bench-3.23.58-20507U90_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/MySQL-client-3.23.58-20507U90_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/MySQL-devel-3.23.58-20507U90_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/MySQL-devel-static-3.23.58-20507U90_3cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/MySQL-doc-3.23.58-20507U90_3cl.i386.rpm
ADDITIONAL INSTRUCTIONS
The apt tool can be used to perform RPM packages upgrades:
- run: apt-get update
- after that, execute: apt-get upgrade
Detailed instructions regarding the use of apt and upgrade examples
can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en
- - -------------------------------------------------------------------------
All packages are signed with Conectiva's GPG key. The key and instructions
on how to import it can be found at
http://distro.conectiva.com.br/seguranca/chave/?idioma=en
Instructions on how to check the signatures of the RPM packages can be
found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en
- - -------------------------------------------------------------------------
All our advisories and generic update instructions can be viewed at
http://distro.conectiva.com.br/atualizacoes/?idioma=en
- - -------------------------------------------------------------------------
Copyright (c) 2004 Conectiva Inc.
http://www.conectiva.com
- - -------------------------------------------------------------------------
subscribe: conectiva-updates-subscribe@xxxxxxxxxxxxxxxxxxxxxxxxxxx
unsubscribe: conectiva-updates-unsubscribe@xxxxxxxxxxxxxxxxxxxxxxxxxxx
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQFCUXD/42jd0JmAcZARAne3AJ9j8TDxcOUuLrG63CEqoanaMQXKsQCguNaX
Z4hPKaRZ9oUz4yK12+l7+sU=
=UxRZ
- -----END PGP SIGNATURE-----
- ----------------------------------------------------------------------------------
For additional information or assistance, please contact the HELP Desk by
telephone or Not Protectively Marked information may be sent via
EMail to: uniras@xxxxxxxxxxxx
Office Hours:
Mon - Fri: 08:30 - 17:00 Hrs
Tel: +44 (0) 870 487 0748 Ext 4511
Fax: +44 (0) 870 487 0749
Outside of Office Hours:
On Call Duty Officer:
Tel: +44 (0) 870 487 0748 and follow the prompts
- ----------------------------------------------------------------------------------
UNIRAS wishes to acknowledge the contributions of Conectiva for the information
contained in this Briefing.
- ----------------------------------------------------------------------------------
This Briefing contains the information released by the original author. Some
of the information may have changed since it was released. If the vulnerability
affects you, it may be prudent to retrieve the advisory from the canonical site
to ensure that you receive the most current information concerning that problem.
Reference to any specific commercial product, process, or service by trade
name, trademark manufacturer, or otherwise, does not constitute or imply
its endorsement, recommendation, or favouring by UNIRAS or NISCC. The views
and opinions of authors expressed within this notice shall not be used for
advertising or product endorsement purposes.
Neither UNIRAS or NISCC shall also accept responsibility for any errors
or omissions contained within this briefing notice. In particular, they shall
not be liable for any loss or damage whatsoever, arising from or in connection
with the usage of information contained within this notice.
UNIRAS is a member of the Forum of Incident Response and Security Teams (FIRST)
and has contacts with other international Incident Response Teams (IRTs) in
order to foster cooperation and coordination in incident prevention, to prompt
rapid reaction to incidents, and to promote information sharing amongst its
members and the community at large.
- ----------------------------------------------------------------------------------
<End of UNIRAS Briefing>
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0
iQCVAwUBQlKbgYpao72zK539AQGbdgP9FzPUeEEEXWnDlSndXQuSBi59knz34s89
kFZoWlYJp/YjyE9ppMFHwb/I2hYu5RVb0Xno+XP6QsDodNLXGIe96HGwItHsGYrM
dxaFBazl+s6r07RZGQtJaGjVbmv7j6L+9febH5+s1wudZQ1X2qX7OrF5tQQWodu9
zr9Iwgp1foQ=
=flVB
-----END PGP SIGNATURE-----
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________