Oracle MySQL Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in MySQL, which can be exploited by malicious users to cause a DoS (Denial of Service) and compromise a vulnerable system and by malicious people to conduct brute force attacks.

1. An error when processing a database name within certain functions when checking access rights can be exploited to cause a stack-based buffer overflow.
2. An error when deleting a table can be exploited to cause a heap-based buffer overflow.
3. An error when handling the COM_BINLOG_DUMP command can be exploited to crash the daemon.
4. An error when handling authentication errors can be exploited to enumerate valid user accounts.

Successful exploitation of vulnerabilities #1 and #2 may allow execution of arbitrary code.

Note: No patch is currently avaliable