ID de Prueba:	1.3.6.1.4.1.25623.1.0.100646
Categoría:	Buffer overflow
Título:	Oracle MySQL 'COM_FIELD_LIST' Command Buffer Overflow Vulnerability
Resumen:	MySQL is prone to a buffer-overflow vulnerability because it fails to; perform adequate boundary checks on user-supplied data.
Descripción:	Summary: MySQL is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Vulnerability Impact: An authenticated attacker can leverage this issue to execute arbitrary code within the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Affected Software/OS: Versions prior to MySQL 5.1.47 are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1850 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:107 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10846 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6693 http://www.redhat.com/support/errata/RHSA-2010-0442.html http://securitytracker.com/id?1024033 SuSE Security Announcement: SUSE-SR:2010:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html http://www.ubuntu.com/usn/USN-1397-1
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.