Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
DB:MYSQL:FS-REQUEST |
|---|---|
Severity |
Minor |
Recommended |
No |
Category |
DB |
Keywords |
Format String In Request |
Release Date |
2009/07/21 |
Update Number |
1465 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
SQL: Format String In Request
This signature detects attempts to exploit a known vulnerability against a MySQL database server. A successful attack can lead to arbitrary code execution.
Extended Description
MySQL is prone to multiple format-string vulnerabilities. Attackers can leverage these issues to execute arbitrary code within the context of the vulnerable application. Failed attacks will likely cause denial-of-service conditions. MySQL 4.0.0 through 5.0.75 are vulnerable; other versions may also be affected.
Affected Products
- Apple mac_os_x_server 10.6
- Apple mac_os_x_server 10.6.1
- Apple mac_os_x_server 10.6.2
- Debian linux 4.0
- Debian linux 4.0 Alpha
- Debian linux 4.0 Amd64
- Debian linux 4.0 Arm
- Debian linux 4.0 Armel
- Debian linux 4.0 Hppa
- Debian linux 4.0 Ia-32
- Debian linux 4.0 Ia-64
- Debian linux 4.0 M68k
- Debian linux 4.0 Mips
- Debian linux 4.0 Mipsel
- Debian linux 4.0 Powerpc
- Debian linux 4.0 S/390
- Debian linux 4.0 Sparc
- Debian linux 5.0
- Debian linux 5.0 Alpha
- Debian linux 5.0 Amd64
- Debian linux 5.0 Arm
- Debian linux 5.0 Armel
- Debian linux 5.0 Hppa
- Debian linux 5.0 Ia-32
- Debian linux 5.0 Ia-64
- Debian linux 5.0 M68k
- Debian linux 5.0 Mips
- Debian linux 5.0 Mipsel
- Debian linux 5.0 Powerpc
- Debian linux 5.0 S/390
- Debian linux 5.0 Sparc
- Gentoo linux
- Mandriva corporate_server 4.0
- Mandriva corporate_server 4.0.0 X86 64
- Mandriva enterprise_server 5
- Mandriva enterprise_server 5 X86 64
- Mandriva linux_mandrake 2008.0
- Mandriva linux_mandrake 2008.0 X86 64
- Mandriva linux_mandrake 2008.1
- Mandriva linux_mandrake 2008.1 X86 64
- Mandriva linux_mandrake 2009.0
- Mandriva linux_mandrake 2009.0 X86 64
- Mysql_ab mysql 4.0.0 .0
- Mysql_ab mysql 4.0.1
- Mysql_ab mysql 4.0.10
- Mysql_ab mysql 4.0.11
- Mysql_ab mysql 4.0.12
- Mysql_ab mysql 4.0.13
- Mysql_ab mysql 4.0.14
- Mysql_ab mysql 4.0.15
- Mysql_ab mysql 4.0.17
- Mysql_ab mysql 4.0.18
- Mysql_ab mysql 4.0.19
- Mysql_ab mysql 4.0.2
- Mysql_ab mysql 4.0.20
- Mysql_ab mysql 4.0.21
- Mysql_ab mysql 4.0.23
- Mysql_ab mysql 4.0.24
- Mysql_ab mysql 4.0.25
- Mysql_ab mysql 4.0.26
- Mysql_ab mysql 4.0.27
- Mysql_ab mysql 4.0.3
- Mysql_ab mysql 4.0.4
- Mysql_ab mysql 4.0.5
- Mysql_ab mysql 4.0.6
- Mysql_ab mysql 4.0.7
- Mysql_ab mysql 4.0.8
- Mysql_ab mysql 4.0.9
- Mysql_ab mysql 4.1.0-0
- Mysql_ab mysql 4.1.0 .11
- Mysql_ab mysql 4.1.1
- Mysql_ab mysql 4.1.10A
- Mysql_ab mysql 4.1.11
- Mysql_ab mysql 4.1.11A
- Mysql_ab mysql 4.1.12
- Mysql_ab mysql 4.1.13
- Mysql_ab mysql 4.1.15
- Mysql_ab mysql 4.1.16
- Mysql_ab mysql 4.1.18
- Mysql_ab mysql 4.1.19
- Mysql_ab mysql 4.1.2
- Mysql_ab mysql 4.1.20
- Mysql_ab mysql 4.1.21
- Mysql_ab mysql 4.1.23
- Mysql_ab mysql 4.1.24
- Mysql_ab mysql 4.1.4
- Mysql_ab mysql 4.1.5
- Mysql_ab mysql 4.1.7
- Mysql_ab mysql 5.0
- Mysql_ab mysql 5.0.1
- Mysql_ab mysql 5.0.18
- Mysql_ab mysql 5.0.19
- Mysql_ab mysql 5.0.2
- Mysql_ab mysql 5.0.20
- Mysql_ab mysql 5.0.21
- Mysql_ab mysql 5.0.22
- Mysql_ab mysql 5.0.24
- Mysql_ab mysql 5.0.26
- Mysql_ab mysql 5.0.27
- Mysql_ab mysql 5.0.3
- Mysql_ab mysql 5.0.32
- Mysql_ab mysql 5.0.33
- Mysql_ab mysql 5.0.36
- Mysql_ab mysql 5.0.37
- Mysql_ab mysql 5.0.38
- Mysql_ab mysql 5.0.39
- Mysql_ab mysql 5.0.4
- Mysql_ab mysql 5.0.40
- Mysql_ab mysql 5.0.42
- Mysql_ab mysql 5.0.44
- Mysql_ab mysql 5.0.45
- Mysql_ab mysql 5.0.46
- Mysql_ab mysql 5.0.47
- Mysql_ab mysql 5.0.48
- Mysql_ab mysql 5.0.49
- Mysql_ab mysql 5.0.50
- Mysql_ab mysql 5.0.51
- Mysql_ab mysql 5.0.52
- Mysql_ab mysql 5.0.60
- Mysql_ab mysql 5.0.66
- Mysql_ab mysql 5.0.75
- Red_hat application_stack_v2
- Red_hat desktop 4.0.0
- Red_hat enterprise_linux 5 Server
- Red_hat enterprise_linux_as 4
- Red_hat enterprise_linux_as 4.8.Z
- Red_hat enterprise_linux_desktop 5 Client
- Red_hat enterprise_linux_desktop_workstation 5 Client
- Red_hat enterprise_linux_es 4
- Red_hat enterprise_linux_es 4.8.Z
- Red_hat enterprise_linux_ws 4
- Red_hat fedora 10
- Rpath appliance_platform_linux_service 1
- Rpath appliance_platform_linux_service 2
- Rpath rpath_linux 1
- Rpath rpath_linux 2
- Suse novell_linux_desktop 9.0.0
- Suse open-enterprise-server
- Suse opensuse 10.3
- Suse opensuse 11.0
- Suse opensuse 11.1
- Suse suse_linux_enterprise 10
- Suse suse_linux_enterprise 11
- Suse suse_linux_enterprise_server 9
- Ubuntu ubuntu_linux 10.04 Amd64
- Ubuntu ubuntu_linux 10.04 ARM
- Ubuntu ubuntu_linux 10.04 I386
- Ubuntu ubuntu_linux 10.04 Powerpc
- Ubuntu ubuntu_linux 10.04 Sparc
- Ubuntu ubuntu_linux 10.10 amd64
- Ubuntu ubuntu_linux 10.10 ARM
- Ubuntu ubuntu_linux 10.10 i386
- Ubuntu ubuntu_linux 10.10 powerpc
- Ubuntu ubuntu_linux 11.04 amd64
- Ubuntu ubuntu_linux 11.04 ARM
- Ubuntu ubuntu_linux 11.04 i386
- Ubuntu ubuntu_linux 11.04 powerpc
- Ubuntu ubuntu_linux 11.10 amd64
- Ubuntu ubuntu_linux 11.10 i386
- Ubuntu ubuntu_linux 6.06 LTS Amd64
- Ubuntu ubuntu_linux 6.06 LTS I386
- Ubuntu ubuntu_linux 6.06 LTS Powerpc
- Ubuntu ubuntu_linux 6.06 LTS Sparc
- Ubuntu ubuntu_linux 8.04 LTS Amd64
- Ubuntu ubuntu_linux 8.04 LTS I386
- Ubuntu ubuntu_linux 8.04 LTS Lpia
- Ubuntu ubuntu_linux 8.04 LTS Powerpc
- Ubuntu ubuntu_linux 8.04 LTS Sparc
- Ubuntu ubuntu_linux 8.10 Amd64
- Ubuntu ubuntu_linux 8.10 I386
- Ubuntu ubuntu_linux 8.10 Lpia
- Ubuntu ubuntu_linux 8.10 Powerpc
- Ubuntu ubuntu_linux 8.10 Sparc
- Ubuntu ubuntu_linux 9.04 Amd64
- Ubuntu ubuntu_linux 9.04 I386
- Ubuntu ubuntu_linux 9.04 Lpia
- Ubuntu ubuntu_linux 9.04 Powerpc
- Ubuntu ubuntu_linux 9.04 Sparc
- Ubuntu ubuntu_linux 9.10 Amd64
- Ubuntu ubuntu_linux 9.10 I386
- Ubuntu ubuntu_linux 9.10 Lpia
- Ubuntu ubuntu_linux 9.10 Powerpc
- Ubuntu ubuntu_linux 9.10 Sparc
References
- BugTraq: 35609
- CVE: CVE-2009-2446