Signature Detail
Short Name |
DB:MYSQL:FS-REQUEST |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
DB |
Keywords |
Format String In Request |
Release Date |
2009/07/21 |
Update Number |
1465 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SQL: Format String In Request
This signature detects attempts to exploit a known vulnerability against a MySQL database server. A successful attack can lead to arbitrary code execution.
Extended Description
MySQL is prone to multiple format-string vulnerabilities. Attackers can leverage these issues to execute arbitrary code within the context of the vulnerable application. Failed attacks will likely cause denial-of-service conditions. MySQL 4.0.0 through 5.0.75 are vulnerable; other versions may also be affected.
Affected Products
- Apple Mac OS X Server 10.6
- Apple Mac OS X Server 10.6.1
- Apple Mac OS X Server 10.6.2
- Debian Linux 4.0
- Debian Linux 4.0 Alpha
- Debian Linux 4.0 Amd64
- Debian Linux 4.0 Arm
- Debian Linux 4.0 Armel
- Debian Linux 4.0 Hppa
- Debian Linux 4.0 Ia-32
- Debian Linux 4.0 Ia-64
- Debian Linux 4.0 M68k
- Debian Linux 4.0 Mips
- Debian Linux 4.0 Mipsel
- Debian Linux 4.0 Powerpc
- Debian Linux 4.0 S/390
- Debian Linux 4.0 Sparc
- Debian Linux 5.0
- Debian Linux 5.0 Alpha
- Debian Linux 5.0 Amd64
- Debian Linux 5.0 Arm
- Debian Linux 5.0 Armel
- Debian Linux 5.0 Hppa
- Debian Linux 5.0 Ia-32
- Debian Linux 5.0 Ia-64
- Debian Linux 5.0 M68k
- Debian Linux 5.0 Mips
- Debian Linux 5.0 Mipsel
- Debian Linux 5.0 Powerpc
- Debian Linux 5.0 S/390
- Debian Linux 5.0 Sparc
- Gentoo Linux
- Mandriva Corporate Server 4.0
- Mandriva Corporate Server 4.0.0 X86 64
- Mandriva Enterprise Server 5
- Mandriva Enterprise Server 5 X86 64
- Mandriva Linux Mandrake 2008.0
- Mandriva Linux Mandrake 2008.0 X86 64
- Mandriva Linux Mandrake 2008.1
- Mandriva Linux Mandrake 2008.1 X86 64
- Mandriva Linux Mandrake 2009.0
- Mandriva Linux Mandrake 2009.0 X86 64
- MySQL AB MySQL 4.0.0 .0
- MySQL AB MySQL 4.0.1
- MySQL AB MySQL 4.0.10
- MySQL AB MySQL 4.0.11
- MySQL AB MySQL 4.0.12
- MySQL AB MySQL 4.0.13
- MySQL AB MySQL 4.0.14
- MySQL AB MySQL 4.0.15
- MySQL AB MySQL 4.0.17
- MySQL AB MySQL 4.0.18
- MySQL AB MySQL 4.0.19
- MySQL AB MySQL 4.0.2
- MySQL AB MySQL 4.0.20
- MySQL AB MySQL 4.0.21
- MySQL AB MySQL 4.0.23
- MySQL AB MySQL 4.0.24
- MySQL AB MySQL 4.0.25
- MySQL AB MySQL 4.0.26
- MySQL AB MySQL 4.0.27
- MySQL AB MySQL 4.0.3
- MySQL AB MySQL 4.0.4
- MySQL AB MySQL 4.0.5
- MySQL AB MySQL 4.0.6
- MySQL AB MySQL 4.0.7
- MySQL AB MySQL 4.0.8
- MySQL AB MySQL 4.0.9
- MySQL AB MySQL 4.1.0-0
- MySQL AB MySQL 4.1.0 .11
- MySQL AB MySQL 4.1.1
- MySQL AB MySQL 4.1.10A
- MySQL AB MySQL 4.1.11
- MySQL AB MySQL 4.1.11A
- MySQL AB MySQL 4.1.12
- MySQL AB MySQL 4.1.13
- MySQL AB MySQL 4.1.15
- MySQL AB MySQL 4.1.16
- MySQL AB MySQL 4.1.18
- MySQL AB MySQL 4.1.19
- MySQL AB MySQL 4.1.2
- MySQL AB MySQL 4.1.20
- MySQL AB MySQL 4.1.21
- MySQL AB MySQL 4.1.23
- MySQL AB MySQL 4.1.24
- MySQL AB MySQL 4.1.4
- MySQL AB MySQL 4.1.5
- MySQL AB MySQL 4.1.7
- MySQL AB MySQL 5.0
- MySQL AB MySQL 5.0.1
- MySQL AB MySQL 5.0.18
- MySQL AB MySQL 5.0.19
- MySQL AB MySQL 5.0.2
- MySQL AB MySQL 5.0.20
- MySQL AB MySQL 5.0.21
- MySQL AB MySQL 5.0.22
- MySQL AB MySQL 5.0.24
- MySQL AB MySQL 5.0.26
- MySQL AB MySQL 5.0.27
- MySQL AB MySQL 5.0.3
- MySQL AB MySQL 5.0.32
- MySQL AB MySQL 5.0.33
- MySQL AB MySQL 5.0.36
- MySQL AB MySQL 5.0.37
- MySQL AB MySQL 5.0.38
- MySQL AB MySQL 5.0.39
- MySQL AB MySQL 5.0.4
- MySQL AB MySQL 5.0.40
- MySQL AB MySQL 5.0.42
- MySQL AB MySQL 5.0.44
- MySQL AB MySQL 5.0.45
- MySQL AB MySQL 5.0.46
- MySQL AB MySQL 5.0.47
- MySQL AB MySQL 5.0.48
- MySQL AB MySQL 5.0.49
- MySQL AB MySQL 5.0.50
- MySQL AB MySQL 5.0.51
- MySQL AB MySQL 5.0.52
- MySQL AB MySQL 5.0.60
- MySQL AB MySQL 5.0.66
- MySQL AB MySQL 5.0.75
- Red Hat Application Stack v2
- Red Hat Desktop 4.0.0
- Red Hat Enterprise Linux 5 Server
- Red Hat Enterprise Linux AS 4
- Red Hat Enterprise Linux AS 4.8.Z
- Red Hat Enterprise Linux Desktop 5 Client
- Red Hat Enterprise Linux Desktop Workstation 5 Client
- Red Hat Enterprise Linux ES 4
- Red Hat Enterprise Linux ES 4.8.Z
- Red Hat Enterprise Linux WS 4
- Red Hat Fedora 10
- rPath Appliance Platform Linux Service 1
- rPath Appliance Platform Linux Service 2
- rPath rPath Linux 1
- rPath rPath Linux 2
- SuSE Novell Linux Desktop 9.0.0
- SuSE Open-Enterprise-Server
- SuSE openSUSE 10.3
- SuSE openSUSE 11.0
- SuSE openSUSE 11.1
- SuSE SUSE Linux Enterprise 10
- SuSE SUSE Linux Enterprise 11
- SuSE SUSE Linux Enterprise Server 9
- Ubuntu Ubuntu Linux 10.04 Amd64
- Ubuntu Ubuntu Linux 10.04 ARM
- Ubuntu Ubuntu Linux 10.04 I386
- Ubuntu Ubuntu Linux 10.04 Powerpc
- Ubuntu Ubuntu Linux 10.04 Sparc
- Ubuntu Ubuntu Linux 10.10 amd64
- Ubuntu Ubuntu Linux 10.10 ARM
- Ubuntu Ubuntu Linux 10.10 i386
- Ubuntu Ubuntu Linux 10.10 powerpc
- Ubuntu Ubuntu Linux 11.04 amd64
- Ubuntu Ubuntu Linux 11.04 ARM
- Ubuntu Ubuntu Linux 11.04 i386
- Ubuntu Ubuntu Linux 11.04 powerpc
- Ubuntu Ubuntu Linux 11.10 amd64
- Ubuntu Ubuntu Linux 11.10 i386
- Ubuntu Ubuntu Linux 6.06 LTS Amd64
- Ubuntu Ubuntu Linux 6.06 LTS I386
- Ubuntu Ubuntu Linux 6.06 LTS Powerpc
- Ubuntu Ubuntu Linux 6.06 LTS Sparc
- Ubuntu Ubuntu Linux 8.04 LTS Amd64
- Ubuntu Ubuntu Linux 8.04 LTS I386
- Ubuntu Ubuntu Linux 8.04 LTS Lpia
- Ubuntu Ubuntu Linux 8.04 LTS Powerpc
- Ubuntu Ubuntu Linux 8.04 LTS Sparc
- Ubuntu Ubuntu Linux 8.10 Amd64
- Ubuntu Ubuntu Linux 8.10 I386
- Ubuntu Ubuntu Linux 8.10 Lpia
- Ubuntu Ubuntu Linux 8.10 Powerpc
- Ubuntu Ubuntu Linux 8.10 Sparc
- Ubuntu Ubuntu Linux 9.04 Amd64
- Ubuntu Ubuntu Linux 9.04 I386
- Ubuntu Ubuntu Linux 9.04 Lpia
- Ubuntu Ubuntu Linux 9.04 Powerpc
- Ubuntu Ubuntu Linux 9.04 Sparc
- Ubuntu Ubuntu Linux 9.10 Amd64
- Ubuntu Ubuntu Linux 9.10 I386
- Ubuntu Ubuntu Linux 9.10 Lpia
- Ubuntu Ubuntu Linux 9.10 Powerpc
- Ubuntu Ubuntu Linux 9.10 Sparc
References
- BugTraq: 35609
- CVE: CVE-2009-2446