ID de Prueba:	1.3.6.1.4.1.25623.1.0.801573
Categoría:	Databases
Título:	MySQL 'Gis_line_string::init_from_wkb()' DOS Vulnerability
Resumen:	MySQL is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: MySQL is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to an error in 'Gis_line_string::init_from_wkb()' function in 'sql/spatial.cc', allows remote authenticated users to cause a denial of service by calling the PolyFromWKB function with WKB data containing a crafted number of line strings or line points. Vulnerability Impact: Successful exploitation could allow users to cause a denial of service and to execute arbitrary code. Affected Software/OS: MySQL version 5.1 before 5.1.51. Solution: Upgrade to MySQL version 5.1.51. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3840 BugTraq ID: 43676 http://www.securityfocus.com/bid/43676 Debian Security Information: DSA-2143 (Google Search) http://www.debian.org/security/2011/dsa-2143 http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 http://www.mandriva.com/security/advisories?name=MDVSA-2010:223 http://lists.mysql.com/commits/117094 http://www.redhat.com/support/errata/RHSA-2010-0824.html http://www.redhat.com/support/errata/RHSA-2010-0825.html http://www.redhat.com/support/errata/RHSA-2011-0164.html http://secunia.com/advisories/42875 http://secunia.com/advisories/42936 TurboLinux Advisory: TLSA-2011-3 http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt http://www.ubuntu.com/usn/USN-1017-1 http://www.ubuntu.com/usn/USN-1397-1 http://www.vupen.com/english/advisories/2011/0105 http://www.vupen.com/english/advisories/2011/0170 http://www.vupen.com/english/advisories/2011/0345 XForce ISS Database: mysql-gislinestringinitfromwkb-dos(64838) https://exchange.xforce.ibmcloud.com/vulnerabilities/64838
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.