MySQL contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a malicious client sends a specially crafted invalid login or COM_TABLE_DUMP packets, which will disclose arbitrary memory in error messages resulting in a loss of confidentiality.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Confidentiality
Exploit:
Exploit Public
Disclosure:
Vendor Verified
Solution
Upgrade to version 4.1.19, 5.0.21, 5.1.10 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
wisec.it -
Minded Security
