MySQL security flaws uncovered
Summary
Topics
E-matters, a German company, released a security advisory after discovering the flaws. They have rated the vulnerabilities as "Medium to Critical" in severity.
The security flaws discovered by the company range from Denial of Service (DoS) problems to more serious issues. "...one of the flaws can be used to bypass the MySQL password check or to execute arbitrary code," the advisory said.
E-matters also found multiple vulnerabilities in the MySQL client libraries, which "...could allow DoS attacks against or arbitrary code execution within anything linked against libmysqlclient."
The vulnerabilities affect all versions prior to 3.23.53a and 4.0.5a. MySQL have released an updated "version 3" (3.23.54) that is immune to the security bugs.
It is not known when an updated "version 4" MySQL will be released. E-matters will not be releasing an exploit for the vulnerability.
Talkback - Tell Us What You Think
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
Facebook Activity
