The penetration of virtual servers is approaching 50 percent in IT infrastructures, yet administrators are only backing up, on average, 68 percent of their...
Given the extraordinary and rapid changes in the DDoS terrain, traditional DDoS mitigation tactics are no longer sufficient to protect an organization's...
Package : mysql-dfsg-4.1
Vulnerability : several
Problem-Type : local
Debian-specific: no
CVE ID : CVE-2006-3081 CVE-2006-3469
Debian Bug : 373913 375694
Several local vulnerabilities have been discovered in the MySQL
database server, which may lead to denial of service. The Common
Vulnerabilities and Exposures project identifies the following
problems:
CVE-2006-3081
"Kanatoko" discovered that the server can be crashed with
feeding NULL values to the str_to_date() function.
CVE-2006-3469
Jean-David Maillefer discovered that the server can be crashed
with specially crafted date_format() function calls.
For the stable distribution (sarge) these problems have been
fixed in version 4.1.11a-4sarge5.
For the unstable distribution (sid) does no longer contain MySQL
4.1 packages. MySQL 5.0 from sid is not affected.
We recommend that you upgrade your mysql-dfsg-4.1 packages.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
