----------------------------------------------------------------------

2003: 2,700 advisories published
2004: 3,100 advisories published
2005: 4,600 advisories published
2006: 5,300 advisories published

How do you know which Secunia advisories are important to you?

The Secunia Vulnerability Intelligence Solutions allows you to filter
and structure all the information you need, so you can address issues
effectively.

Get a free trial of the Secunia Vulnerability Intelligence Solutions:
http://corporate.secunia.com/how_to_buy/38/vi/?ref=secadv

----------------------------------------------------------------------

TITLE:
MySQL Security Issue and Two Vulnerabilities

SECUNIA ADVISORY ID:
SA28063

VERIFY ADVISORY:
http://secunia.com/advisories/28063/

CRITICAL:
Less critical

IMPACT:
Manipulation of data, Privilege escalation, DoS

WHERE:
>From remote

SOFTWARE:
MySQL 5.x
http://secunia.com/product/8355/

DESCRIPTION:
A security issue and two vulnerabilities have been reported in MySQL,
which can be exploited by malicious users to gain escalated
privileges, manipulate certain data, or to cause a DoS (Denial of
Service).

1) A security issue exists due to the command "ALTER VIEW" retaining
the original "DEFINER" value, which may allow another user to gain
the access rights of the view.

2) An error in the FEDERATED engine when handling responses of remote
servers can be exploited to crash the local server when the response
contains fewer columns than expected.

3) An error when renaming a table can be exploited by malicious users
to manipulate certain data.

For more information:
SA27981

The security issue and vulnerabilities have been reported in MySQL
Enterprise prior to version 5.0.52 [MRU].

SOLUTION:
Update to MySQL Enterprise version 5.0.52 [MRU].

PROVIDED AND/OR DISCOVERED BY:
1) Martin Friebe
2) Philip Stoev
3) Reported by the vendor.

ORIGINAL ADVISORY:
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html

OTHER REFERENCES:
SA27981:
http://secunia.com/advisories/27981/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------