[mysql] DoS vulnerability in InnoDB engine

[disabled.user]

Binary package hint: mysql-server-5.0

References:
[1] http://www.gentoo.org/security/en/glsa/glsa-200711-25.xml
[2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5925

Quoting [1]:
"Joe Gallo and Artem Russakovskii reported an error in the convert_search_mode_to_innobase() function in ha_innodb.cc in the InnoDB engine that is leading to a failed assertion when handling CONTAINS operations. [...] A remote authenticated attacker with ALTER privileges could send a specially crafted request to a vulnerable database server possibly leading to a Denial of Service."

Quoting [2]:
"The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error."

[disabled.user (disabled.user-deactivatedaccount)]

See also Bug#172260.