OpenPKG Security Advisory

Publisher Name:          OpenPKG GmbH
Publisher Home:          http://openpkg.com/

Advisory Id (public):    OpenPKG-SA-2003.038
Advisory Type:           OpenPKG Security Advisory (SA)
Advisory Directory:      http://openpkg.com/go/OpenPKG-SA
Advisory Document:       http://openpkg.com/go/OpenPKG-SA-2003.038
Advisory Published:      2009-07-05 03:59 UTC

Issue Id (internal):     OpenPKG-SI-20030915.01
Issue First Created:     2003-09-15
Issue Last Modified:     2006-11-28
Issue Revision:          05


Subject Name:            MySQL
Subject Summary:         Fast Relational Database Management System
Subject Home:            http://www.mysql.com/
Subject Versions:        * <= 4.0.14

Vulnerability Id:        CVE-2003-0780
Vulnerability Scope:     global (not OpenPKG specific)

Attack Feasibility:      run-time
Attack Vector:           remote network
Attack Impact:           arbitrary code execution

Description:
    Frank Denis reported a vulnerability [0] in MySQL [1] affecting MySQL3
    versions 3.0.57 and earlier and MySQL4 versions 4.0.14 and earlier.
    Passwords of MySQL users are stored in the "Password" field of the
    "User" table, part of the "mysql" database. The passwords are hashed
    and stored as a 16 characters long hexadecimal value. Unfortunately, a
    function involved in password checking misses correct bounds checking.
    By filling a "Password" field a value wider than 16 characters, a
    buffer overflow will occur.

References:
    [0] http://www.securityfocus.com/archive/1/337012/2003-09-05/2003-09-11/0
    [1] http://www.mysql.com/
    [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0780
    [3] http://www.openpkg.org/tutorial.html#regular-source
    [4] http://www.openpkg.org/tutorial.html#regular-binary
    [5] ftp://ftp.openpkg.org/release/1.2/UPD/mysql-3.23.54a-1.2.4.src.rpm
    [6] ftp://ftp.openpkg.org/release/1.3/UPD/mysql-4.0.14-1.3.2.src.rpm
    [7] ftp://ftp.openpkg.org/release/1.2/UPD/
    [8] ftp://ftp.openpkg.org/release/1.3/UPD/
    [9] http://www.openpkg.org/security.html#signature


Primary Package Name:    mysql
Primary Package Home:    http://openpkg.org/go/package/mysql

Affected Distribution:   Affected Branch:  Affected Package:
OpenPKG Community        1.2-SOLID         mysql-3.23.54a-1.2.3
OpenPKG Community        1.3-SOLID         mysql-4.0.14-1.3.1
OpenPKG Community        CURRENT           mysql-4.0.14-20030904

Corrected Distribution:  Corrected Branch: Corrected Package:
OpenPKG Community        1.2-SOLID         mysql-3.23.54a-1.2.4
OpenPKG Community        1.3-SOLID         mysql-4.0.14-1.3.2
OpenPKG Community        CURRENT           mysql-4.0.15-20030910