Uploaded image for project: 'MariaDB Connector/C'
  1. MariaDB Connector/C
  2. CONC-429

libmariadb allows invalid plugin names

Details

    • Bug
    • Status: Closed (View Workflow)
    • Blocker
    • Resolution: Fixed
    • 3.1
    • 3.1.3
    • None
    • None

    Description

      During authentication the server tells client what plugin to load.

      The client does not sanitize plugin names as they're coming from the server.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-20110 libmysqlclient allows invalid plugin names

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          links to

          Web Link Path traversal in command line client

          Activity

            Ascending order - Click to sort in descending order
            serg Sergei Golubchik created issue -
            serg Sergei Golubchik made changes -
            Field Original Value New Value
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik made changes -
            Fix Version/s 3.1.3 [ 23743 ]
            Fix Version/s 3.1 [ 23223 ]
            Assignee Georg Richter [ georg ] Oleksandr Byelkin [ sanja ]
            Resolution Fixed [ 1 ]
            Status Open [ 1 ] Closed [ 6 ]
            julien.fritsch Julien Fritsch made changes -
            Workflow MariaDB connectors [ 98388 ] MariaDB v4 [ 161180 ]

            People

              sanja Oleksandr Byelkin
              serg Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.