Signature Detail

DB: MySQL USE Command Denial of Service

This signature detects a maliciously crafted USE command, containing a printer device-name, sent to a MySQL server daemon. Such a command could trigger a denial-of-service condition to occur on the destination host.

Extended Description

Zlib is prone to a buffer-overflow vulnerability because the application fails to properly validate input data before using it in a memory copy operation. In certain circumstances, malformed input data during decompression may cause a memory buffer to overflow. This may result in denial-of-service conditions or may allow remote code to execute in the context of applications that use the affected library.

Affected Products

• Aide aide 0.10.0
• Apple mac_os_x 10.4.2
• Apple mac_os_x_server 10.4.2
• Apple safari 3
• Apple safari 3.0.1 Beta
• Apple safari 3.0.3 Beta
• Apple safari 3.1
• Apple safari 3.1.1
• Apple safari 3 Beta
• Avaya predictive_dialing_system_(pds) 12.0.0
• Conectiva linux 10.0.0
• Cvs cvs 1.12.12
• Daniel_stenberg curl 7.17.0
• David_ingalls_bell sash 3.4
• David_ingalls_bell sash 3.6
• David_ingalls_bell sash 3.7
• Debian linux 3.0.0
• Debian linux 3.0.0 Alpha
• Debian linux 3.0.0 Arm
• Debian linux 3.0.0 Hppa
• Debian linux 3.0.0 Ia-32
• Debian linux 3.0.0 Ia-64
• Debian linux 3.0.0 M68k
• Debian linux 3.0.0 Mips
• Debian linux 3.0.0 Mipsel
• Debian linux 3.0.0 Ppc
• Debian linux 3.0.0 S/390
• Debian linux 3.0.0 Sparc
• Debian linux 3.1.0
• Debian linux 3.1.0 Alpha
• Debian linux 3.1.0 Amd64
• Debian linux 3.1.0 Arm
• Debian linux 3.1.0 Hppa
• Debian linux 3.1.0 Ia-32
• Debian linux 3.1.0 Ia-64
• Debian linux 3.1.0 M68k
• Debian linux 3.1.0 Mips
• Debian linux 3.1.0 Mipsel
• Debian linux 3.1.0 Ppc
• Debian linux 3.1.0 S/390
• Debian linux 3.1.0 Sparc
• Ethereal_group ethereal 0.10.0
• Ethereal_group ethereal 0.10.0 .10
• Ethereal_group ethereal 0.10.1
• Ethereal_group ethereal 0.10.11
• Ethereal_group ethereal 0.10.2
• Ethereal_group ethereal 0.10.3
• Ethereal_group ethereal 0.10.4
• Ethereal_group ethereal 0.10.5
• Ethereal_group ethereal 0.10.6
• Ethereal_group ethereal 0.10.7
• Ethereal_group ethereal 0.10.8
• Ethereal_group ethereal 0.10.9
• Filezilla filezilla_server 0.7.0
• Filezilla filezilla_server 0.7.1
• Filezilla filezilla_server 0.8.1
• Filezilla filezilla_server 0.8.2
• Filezilla filezilla_server 0.8.3
• Filezilla filezilla_server 0.8.4
• Filezilla filezilla_server 0.8.5
• Filezilla filezilla_server 0.8.6a
• Filezilla filezilla_server 0.8.7
• Filezilla filezilla_server 0.8.8
• Filezilla filezilla_server 0.8.9
• Filezilla filezilla_server 0.9.0
• Filezilla filezilla_server 0.9.1b
• Filezilla filezilla_server 0.9.2
• Filezilla filezilla_server 0.9.3
• Filezilla filezilla_server 0.9.4d
• Filezilla filezilla_server 0.9.4e
• Filezilla filezilla_server 0.9.5
• Filezilla filezilla_server 0.9.6
• Filezilla filezilla_server 0.9.8
• Filezilla filezilla_server 0.9.8 a
• Filezilla filezilla_server 0.9.8 b
• Filezilla filezilla_server 0.9.8 c
• Freebsd freebsd 5.3.0
• Freebsd freebsd 5.3.0 -RELEASE
• Freebsd freebsd 5.3.0 -RELENG
• Freebsd freebsd 5.3.0 -STABLE
• Freebsd freebsd 5.4.0 -PRERELEASE
• Freebsd freebsd 5.4.0 -RELEASE
• Freebsd freebsd 5.4.0 -RELENG
• Gentoo linux
• Hp hp-ux 11.0.0
• Hp hp-ux 11.11.0
• Hp hp-ux 11.23.0
• Hp hp-ux B.11.00
• Hp hp-ux B.11.11
• Hp hp-ux B.11.23
• Ipcop ipcop 1.4.1
• Ipcop ipcop 1.4.2
• Ipcop ipcop 1.4.4
• Ipcop ipcop 1.4.5
• Ipcop ipcop 1.4.6
• Ken_kato virtual_floppy_drive 2.1
• Mandriva corporate_server 2.1.0
• Mandriva corporate_server 2.1.0 X86 64
• Mandriva corporate_server 3.0.0
• Mandriva corporate_server 3.0.0 X86 64
• Mandriva linux_mandrake 10.0.0
• Mandriva linux_mandrake 10.0.0 amd64
• Mandriva linux_mandrake 10.1.0
• Mandriva linux_mandrake 10.1.0 X86 64
• Mandriva linux_mandrake 10.2.0
• Mandriva linux_mandrake 10.2.0 X86 64
• Mandriva linux_mandrake 2006.0.0
• Mandriva linux_mandrake 2006.0.0 X86 64
• Mandriva multi_network_firewall 2.0.0
• Mysql_ab mysql 4.0.0 .0
• Mysql_ab mysql 4.0.1
• Mysql_ab mysql 4.0.10
• Mysql_ab mysql 4.0.11
• Mysql_ab mysql 4.0.11 -Gamma
• Mysql_ab mysql 4.0.12
• Mysql_ab mysql 4.0.13
• Mysql_ab mysql 4.0.14
• Mysql_ab mysql 4.0.15
• Mysql_ab mysql 4.0.18
• Mysql_ab mysql 4.0.2
• Mysql_ab mysql 4.0.20
• Mysql_ab mysql 4.0.21
• Mysql_ab mysql 4.0.24
• Mysql_ab mysql 4.0.3
• Mysql_ab mysql 4.0.4
• Mysql_ab mysql 4.0.5
• Mysql_ab mysql 4.0.5 A
• Mysql_ab mysql 4.0.6
• Mysql_ab mysql 4.0.7
• Mysql_ab mysql 4.0.7 -Gamma
• Mysql_ab mysql 4.0.8
• Mysql_ab mysql 4.0.8 -Gamma
• Mysql_ab mysql 4.0.9
• Mysql_ab mysql 4.0.9 -Gamma
• Mysql_ab mysql 4.1.0-0
• Mysql_ab mysql 4.1.0.0-Alpha
• Mysql_ab mysql 4.1.10A
• Mysql_ab mysql 4.1.2 -Alpha
• Mysql_ab mysql 4.1.3 -0
• Mysql_ab mysql 4.1.3 -Beta
• Mysql_ab mysql 4.1.4
• Mysql_ab mysql 4.1.5
• Openbsd openbsd 3.5
• Openbsd openbsd 3.6
• Openbsd openbsd 3.7
• Openpkg openpkg 2.3.0
• Openpkg openpkg 2.4.0
• Openpkg openpkg Current
• Red_hat desktop 4.0.0
• Red_hat enterprise_linux_as 4
• Red_hat enterprise_linux_es 4
• Red_hat enterprise_linux_ws 4
• Red_hat fedora Core1
• Red_hat fedora Core2
• Red_hat fedora Core4
• Red_hat network_satellite_(for_rhel_4) 5.1
• Red_hat red_hat_network_satellite_server 4.2
• Red_hat red_hat_network_satellite_server 5.0.0
• Red_hat rpm 4.4.1
• Russell_lang gsview 4.8
• Sco open_server 5.0.6
• Sco open_server 5.0.6 a
• Sco open_server 5.0.7
• Sco open_server 6.0.0
• Sco unixware 7.1.3
• Sco unixware 7.1.4
• Slackware linux 10.0.0
• Slackware linux 10.1.0
• Slackware linux -Current
• Sun java_enterprise_system 2003Q4
• Sun java_enterprise_system 2004Q2
• Sun java_enterprise_system 2005Q1
• Sun solaris 10 Sparc
• Sun solaris 10 X86
• Sun solaris 8 Sparc
• Sun solaris 8 X86
• Sun solaris 9 Sparc
• Sun solaris 9 X86
• Sun solaris 9 X86 Update 2
• Suse linux_personal 9.1.0
• Suse linux_personal 9.1.0 X86 64
• Suse linux_personal 9.2.0
• Suse linux_personal 9.2.0 X86 64
• Suse linux_personal 9.3.0
• Suse linux_personal 9.3.0 X86 64
• Suse linux_professional 9.1.0
• Suse linux_professional 9.1.0 X86 64
• Suse linux_professional 9.2.0
• Suse linux_professional 9.2.0 X86 64
• Suse linux_professional 9.3.0
• Suse linux_professional 9.3.0 X86 64
• Suse novell_linux_desktop 9.0.0
• Suse open-enterprise-server 9.0.0
• Suse suse_linux_enterprise_server 9
• Trolltech qt 2.3.1
• Trolltech qt 3.0.0
• Trolltech qt 3.0.3
• Trolltech qt 3.0.5
• Trolltech qt 3.1.0
• Trolltech qt 3.1.1
• Trolltech qt 3.1.2
• Trolltech qt 3.2.1
• Trolltech qt 3.2.3
• Trolltech qt 3.3.0 .0
• Trolltech qt 3.3.1
• Trolltech qt 3.3.2
• Trolltech qt 3.3.3
• Trolltech qt 3.3.4
• Trustix secure_enterprise_linux 2.0.0
• Trustix secure_linux 2.2.0
• Trustix secure_linux 3.0.0
• Ubuntu ubuntu_linux 4.1.0 Ia32
• Ubuntu ubuntu_linux 4.1.0 Ia64
• Ubuntu ubuntu_linux 4.1.0 Ppc
• Ubuntu ubuntu_linux 5.0.0 4 Amd64
• Ubuntu ubuntu_linux 5.0.0 4 I386
• Ubuntu ubuntu_linux 5.0.0 4 Powerpc
• Ubuntu ubuntu_linux 5.10.0 Amd64
• Ubuntu ubuntu_linux 5.10.0 I386
• Ubuntu ubuntu_linux 5.10.0 Powerpc
• Vmware esx_server 3.0.0
• Vmware esx_server 3.0.1
• Zlib zlib 1.0.0
• Zlib zlib 1.0.1
• Zlib zlib 1.0.2
• Zlib zlib 1.0.3
• Zlib zlib 1.0.4
• Zlib zlib 1.0.5
• Zlib zlib 1.0.6
• Zlib zlib 1.0.7
• Zlib zlib 1.0.8
• Zlib zlib 1.0.9
• Zlib zlib 1.1.0
• Zlib zlib 1.1.1
• Zlib zlib 1.1.2
• Zlib zlib 1.1.3
• Zlib zlib 1.1.4
• Zlib zlib 1.2.0 .0.7
• Zlib zlib 1.2.1
• Zlib zlib 1.2.2
• Zsync zsync 0.0.1
• Zsync zsync 0.0.2
• Zsync zsync 0.0.3
• Zsync zsync 0.0.4
• Zsync zsync 0.0.5
• Zsync zsync 0.0.6
• Zsync zsync 0.1.0
• Zsync zsync 0.1.1
• Zsync zsync 0.1.2
• Zsync zsync 0.1.3
• Zsync zsync 0.1.4
• Zsync zsync 0.1.5
• Zsync zsync 0.1.6
• Zsync zsync 0.2.0
• Zsync zsync 0.2.1
• Zsync zsync 0.2.2
• Zsync zsync 0.2.3
• Zsync zsync 0.3.0
• Zsync zsync 0.3.1
• Zsync zsync 0.3.2
• Zsync zsync 0.3.3
• Zsync zsync 0.4.0

References

• BugTraq: 14162
• CVE: CVE-2005-2096