← volver
CVE-2009-4019

CVE-2009-4019

EPSS 16.3%
mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/33398no verificadoexploitdbwww.exploit-db.com/exploits/33397no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://bugs.mysql.com/47780http://bugs.mysql.com/48291http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.htmlhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.htmlhttp://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.htmlhttp://marc.info/?l=oss-security&m=125881733826437&w=2http://marc.info/?l=oss-security&m=125883754215621&w=2http://marc.info/?l=oss-security&m=125901161824278&w=2https://bugzilla.redhat.com/show_bug.cgi?id=540906http://secunia.com/advisories/37717http://secunia.com/advisories/38517