ID de Prueba:	1.3.6.1.4.1.25623.1.0.801573
Categoría:	Databases
Título:	MySQL 'Gis_line_string::init_from_wkb()' DOS Vulnerability
Resumen:	The host is running MySQL and is prone to denial of service; vulnerability.
Descripción:	Summary: The host is running MySQL and is prone to denial of service vulnerability. Vulnerability Insight: The flaw is due to an error in 'Gis_line_string::init_from_wkb()' function in 'sql/spatial.cc', allows remote authenticated users to cause a denial of service by calling the PolyFromWKB function with WKB data containing a crafted number of line strings or line points. Vulnerability Impact: Successful exploitation could allow users to cause a denial of service and to execute arbitrary code. Affected Software/OS: MySQL version 5.1 before 5.1.51. Solution: Upgrade to MySQL version 5.1.51. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Referencia Cruzada:	BugTraq ID: 43676 Common Vulnerability Exposure (CVE) ID: CVE-2010-3840 http://www.securityfocus.com/bid/43676 Debian Security Information: DSA-2143 (Google Search) http://www.debian.org/security/2011/dsa-2143 http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 http://www.mandriva.com/security/advisories?name=MDVSA-2010:223 http://lists.mysql.com/commits/117094 http://www.redhat.com/support/errata/RHSA-2010-0824.html http://www.redhat.com/support/errata/RHSA-2010-0825.html http://www.redhat.com/support/errata/RHSA-2011-0164.html http://secunia.com/advisories/42875 http://secunia.com/advisories/42936 TurboLinux Advisory: TLSA-2011-3 http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt http://www.ubuntu.com/usn/USN-1017-1 http://www.ubuntu.com/usn/USN-1397-1 http://www.vupen.com/english/advisories/2011/0105 http://www.vupen.com/english/advisories/2011/0170 http://www.vupen.com/english/advisories/2011/0345 XForce ISS Database: mysql-gislinestringinitfromwkb-dos(64838) https://exchange.xforce.ibmcloud.com/vulnerabilities/64838
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.