5

CVE-2007-3780

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mysql ≫ Community Server Version <= 5.0.41
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 14.05% 0.961
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/26987
http://www.novell.com/linux/security/advisories/2007_19_sr.html
http://secunia.com/advisories/27155
http://secunia.com/advisories/27823
http://www.debian.org/security/2007/dsa-1413
https://usn.ubuntu.com/528-1/
http://lists.mysql.com/announce/470
http://secunia.com/advisories/25301
http://secunia.com/advisories/26073
http://secunia.com/advisories/26430
http://www.redhat.com/support/errata/RHSA-2007-0894.html
http://www.securityfocus.com/archive/1/473874/100/0/threaded
https://issues.rpath.com/browse/RPL-1536
http://bugs.mysql.com/bug.php?id=28984
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html
Patch
http://osvdb.org/36732
http://secunia.com/advisories/26498
http://secunia.com/advisories/26621
http://secunia.com/advisories/26710
http://security.gentoo.org/glsa/glsa-200708-10.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:177
http://www.redhat.com/support/errata/RHSA-2007-0875.html
http://www.securityfocus.com/bid/25017
http://www.securitytracker.com/id?1018629
http://www.vupen.com/english/advisories/2008/1000/references
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058