MySQL User Defined Functions Buffer Overflow Vulnerability

2014年10月23日

危険度: : 中

CVE識別番号: CVE-2005-2558

概要

Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.

トレンドマイクロの対策

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

対応方法

Trend Micro Deep Security DPI Rule Number: 1000475

Trend Micro Deep Security DPI Rule Name: 1000475 - Buffer Overflow in MySQL User Defined Functions

影響を受けるソフトウェア

MySQL MySQL 4.0.0
MySQL MySQL 4.0.1
MySQL MySQL 4.0.10
MySQL MySQL 4.0.11
MySQL MySQL 4.0.11 -gamma
MySQL MySQL 4.0.12
MySQL MySQL 4.0.13
MySQL MySQL 4.0.14
MySQL MySQL 4.0.15
MySQL MySQL 4.0.18
MySQL MySQL 4.0.2
MySQL MySQL 4.0.20
MySQL MySQL 4.0.21
MySQL MySQL 4.0.24
MySQL MySQL 4.0.3
MySQL MySQL 4.0.4
MySQL MySQL 4.0.5
MySQL MySQL 4.0.5 a
MySQL MySQL 4.0.6
MySQL MySQL 4.0.7
MySQL MySQL 4.0.7 -gamma
MySQL MySQL 4.0.8
MySQL MySQL 4.0.8 -gamma
MySQL MySQL 4.0.9
MySQL MySQL 4.0.9 -gamma
MySQL MySQL 4.1.0-0
MySQL MySQL 4.1.0-alpha
MySQL MySQL 4.1.10a
MySQL MySQL 4.1.2 -alpha
MySQL MySQL 4.1.3 -0
MySQL MySQL 4.1.3 -Beta
MySQL MySQL 4.1.4
MySQL MySQL 4.1.5
MySQL MySQL 5.0.0-0
MySQL MySQL 5.0.0-alpha
MySQL MySQL 5.0.1
MySQL MySQL 5.0.2
MySQL MySQL 5.0.3
MySQL MySQL 5.0.4