CVE-2009-2942: High severity mysql ocaml vulnerability

Published Oct 22, 2009

Updated

The mysql-ocaml bindings 1.0.4 for MySQL do not properly support the mysqlrealescapestring function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.

Affected Software

2 affected components

mysql-ocaml mysql-ocaml=1.0.4

MySQL mysql

Event History

Oct 22, 2009

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

04:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-2942?

CVE-2009-2942 is considered a high severity vulnerability due to the potential for remote code execution via improper input handling.

How do I fix CVE-2009-2942?

To fix CVE-2009-2942, update the mysql-ocaml bindings to a version later than 1.0.4 that properly implements the mysql_real_escape_string function.

What software is affected by CVE-2009-2942?

CVE-2009-2942 affects the mysql-ocaml bindings version 1.0.4 for MySQL.

Can CVE-2009-2942 be exploited remotely?

Yes, CVE-2009-2942 can be exploited remotely due to the vulnerabilities in character encoding handling.

Is MySQL server directly affected by CVE-2009-2942?

No, the MySQL Server itself is not directly affected by CVE-2009-2942, only the mysql-ocaml bindings are vulnerable.