CVE-2010-3835

Executive Summary

Informations
Name	CVE-2010-3835	First vendor Publication	2011-01-14
Vendor	Cve	Last vendor Modification	2011-09-01

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:N/I:N/A:P)
Cvss Base Score	4	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	8	Authentification	Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3835

CWE : Common Weakness Enumeration

id	Name
CWE-189	Numeric Errors

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mysql Mysql cpe:/a:mysql:mysql:5.5.5 cpe:/a:mysql:mysql:5.5.4 cpe:/a:mysql:mysql:5.5.3 cpe:/a:mysql:mysql:5.5.2 cpe:/a:mysql:mysql:5.5.1 cpe:/a:mysql:mysql:5.5.0 cpe:/a:mysql:mysql:5.1.9 cpe:/a:mysql:mysql:5.1.8 cpe:/a:mysql:mysql:5.1.7 cpe:/a:mysql:mysql:5.1.6 cpe:/a:mysql:mysql:5.1.5a cpe:/a:mysql:mysql:5.1.50 cpe:/a:mysql:mysql:5.1.5 cpe:/a:mysql:mysql:5.1.49 cpe:/a:mysql:mysql:5.1.49:sp1 cpe:/a:mysql:mysql:5.1.48 cpe:/a:mysql:mysql:5.1.47 cpe:/a:mysql:mysql:5.1.46:sp1 cpe:/a:mysql:mysql:5.1.46 cpe:/a:mysql:mysql:5.1.45 cpe:/a:mysql:mysql:5.1.44 cpe:/a:mysql:mysql:5.1.43:sp1 cpe:/a:mysql:mysql:5.1.43 cpe:/a:mysql:mysql:5.1.42 cpe:/a:mysql:mysql:5.1.41 cpe:/a:mysql:mysql:5.1.40:sp1 cpe:/a:mysql:mysql:5.1.40 cpe:/a:mysql:mysql:5.1.4 cpe:/a:mysql:mysql:5.1.39 cpe:/a:mysql:mysql:5.1.38 cpe:/a:mysql:mysql:5.1.37 cpe:/a:mysql:mysql:5.1.37:sp1 cpe:/a:mysql:mysql:5.1.36 cpe:/a:mysql:mysql:5.1.35 cpe:/a:mysql:mysql:5.1.34 cpe:/a:mysql:mysql:5.1.34:sp1 cpe:/a:mysql:mysql:5.1.33 cpe:/a:mysql:mysql:5.1.32-bzr cpe:/a:mysql:mysql:5.1.32 cpe:/a:mysql:mysql:5.1.31 cpe:/a:mysql:mysql:5.1.31:sp1 cpe:/a:mysql:mysql:5.1.30 cpe:/a:mysql:mysql:5.1.3 cpe:/a:mysql:mysql:5.1.29 cpe:/a:mysql:mysql:5.1.28 cpe:/a:mysql:mysql:5.1.27 cpe:/a:mysql:mysql:5.1.26 cpe:/a:mysql:mysql:5.1.25 cpe:/a:mysql:mysql:5.1.24 cpe:/a:mysql:mysql:5.1.23a cpe:/a:mysql:mysql:5.1.23_bk cpe:/a:mysql:mysql:5.1.23 cpe:/a:mysql:mysql:5.1.23:a cpe:/a:mysql:mysql:5.1.22 cpe:/a:mysql:mysql:5.1.21 cpe:/a:mysql:mysql:5.1.20 cpe:/a:mysql:mysql:5.1.2 cpe:/a:mysql:mysql:5.1.19 cpe:/a:mysql:mysql:5.1.18 cpe:/a:mysql:mysql:5.1.17 cpe:/a:mysql:mysql:5.1.16 cpe:/a:mysql:mysql:5.1.15 cpe:/a:mysql:mysql:5.1.14 cpe:/a:mysql:mysql:5.1.13 cpe:/a:mysql:mysql:5.1.12 cpe:/a:mysql:mysql:5.1.11 cpe:/a:mysql:mysql:5.1.10 cpe:/a:mysql:mysql:5.1.1 cpe:/a:mysql:mysql:5.1	69

Open Source Vulnerability Database (OSVDB)

id	Description
69394	MySQL Temporary Table Expression Re-Evaluation DoS

Internal Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
BID	http://www.securityfocus.com/bid/43676
CONFIRM	http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html http://support.apple.com/kb/HT4723 https://bugzilla.redhat.com/show_bug.cgi?id=640819
DEBIAN	http://www.debian.org/security/2011/dsa-2143
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 http://www.mandriva.com/security/advisories?name=MDVSA-2010:223
MISC	http://bugs.mysql.com/bug.php?id=55564
REDHAT	http://www.redhat.com/support/errata/RHSA-2010-0825.html http://www.redhat.com/support/errata/RHSA-2011-0164.html
SECUNIA	http://secunia.com/advisories/42875 http://secunia.com/advisories/42936
TURBO	http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
UBUNTU	http://www.ubuntu.com/usn/USN-1017-1
VUPEN	http://www.vupen.com/english/advisories/2011/0105 http://www.vupen.com/english/advisories/2011/0170 http://www.vupen.com/english/advisories/2011/0345
XF	http://xforce.iss.net/xforce/xfdb/64843

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 23:34:54	Multiple Updates

Type	Count
CPE ID(s)	69
osvdb(s)	1

Related	Severity
USN-1397-1	(High)
GLSA-201201-02	(High)
USN-1017-1	(Medium)
RHSA-2011:0164	(Medium)
RHSA-2010:0825	(Medium)
MDVSA-2010:223	(Medium)
MDVSA-2010:222	(Medium)
DSA-2143	(Medium)