Linux Today: Linux News On Internet Time.
Search Linux Today
Linux News Sections:  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Contribute
Contribute
Link to Us
Linux Jobs


More on LinuxToday


Caldera Systems Security Advisory: MySQL buffer overflow

Jan 30, 2001, 23:07 (0 Talkback[s])

Date: Mon, 29 Jan 2001 11:04:33 -0700
From: Caldera Support Info sup-info@LOCUTUS4.CALDERASYSTEMS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
Subject: CSSA-2001-006.0 MySQL buffer overflow


                   Caldera Systems, Inc.  Security Advisory

Subject:                MySQL buffer overflow
Advisory number:        CSSA-2001-006.0
Issue date:             2001 January, 29
Cross reference:

1. Problem Description

There is a buffer overflow in the MySQL server that allows an attacker to gain access to the mysql account. A valid mysql account is required for this attack. An exploit for this problem has been published on bugtraq.

Note that a second vulnerability is currently being discussed on various mailing lists relating to the SHOW GRANTS command. This command is not supported in MySQL versions currently shipped by Caldera, so this second vulnerability does not affect OpenLinux.

2. Vulnerable Versions

   System                       Package

   OpenLinux eDesktop 2.3.1     All packages previous to
                                mysql-3.22.32-3S
   OpenLinux eDesktop 2.4       All packages previous to
                                mysql-3.22.32-3
OpenLinux Desktop 2.3 is not affected.

3. Solution

Workaround

none

The proper solution is to upgrade to the latest packages.

4. OpenLinux eServer 2.3.1 and OpenLinux eBuilder for ECential 3.0

4.1 Location of Fixed Packages

The upgrade packages can be found on Caldera's FTP site at:

ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/

The corresponding source code package can be found at:

ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/SRPMS

4.2 Verification

940afe2a243e2c568aef4dddbbb56a41 RPMS/mysql-3.22.32-3S.i386.rpm
6930d7617efe5aedd759ccf7271198b6 RPMS/mysql-bench-3.22.32-3S.i386.rpm
d1cf0ed011437ad97cc9beef06b67398 RPMS/mysql-client-3.22.32-3S.i386.rpm
d766bdb5d048e219d0897d4ea73f7b1b RPMS/mysql-devel-3.22.32-3S.i386.rpm
dbf7d36a5860386ab5f48fe32004aa28 SRPMS/mysql-3.22.32-3S.src.rpm
4.3 Installing Fixed Packages

Upgrade the affected packages with the following commands:

          rpm -F mysql-devel-3.22.32-3S.i386.rpm
          rpm -F mysql-bench-3.22.32-3S.i386.rpm
          rpm -F --force mysql-client-3.22.32-3S.i386.rpm
          rpm -F mysql-3.22.32-3S.i386.rpm
5. OpenLinux eDesktop 2.4

5.1 Location of Fixed Packages

The upgrade packages can be found on Caldera's FTP site at:

ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/

The corresponding source code package can be found at:

ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/SRPMS

5.2 Verification

fb5d46fc477ec41919d915461a4e2198 RPMS/mysql-3.22.32-3.i386.rpm
845ce2c207ba9d2256c34e1d6bf078f0 RPMS/mysql-bench-3.22.32-3.i386.rpm
63ea2d09208015029c2f6886b1a27f42 RPMS/mysql-client-3.22.32-3.i386.rpm
af4b2e3d7b8108b19060bfe9059a33d2 RPMS/mysql-devel-3.22.32-3.i386.rpm
55deea47b0e5c259e8ef6ea6f6dd8dc8 SRPMS/mysql-3.22.32-3.src.rpm
5.3 Installing Fixed Packages

Upgrade the affected packages with the following commands:

          rpm -F mysql-devel-3.22.32-3.i386.rpm
          rpm -F mysql-bench-3.22.32-3.i386.rpm
          rpm -F --force mysql-client-3.22.32-3.i386.rpm
          rpm -F mysql-3.22.32-3.i386.rpm
6. References

This and other Caldera security resources are located at:

http://www.calderasystems.com/support/security/index.html

This security fix closes Caldera's internal Problem Report 8889.

7. Disclaimer

Caldera Systems, Inc. is not responsible for the misuse of any of the information we provide on this website and/or through our security advisories. Our advisories are a service to our customers intended to promote secure installation and use of Caldera OpenLinux.