Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

The version of MariaDB installed on the remote host is prior to 5.5.24. It is, therefore, affected by multiple vulnerabilities as referenced in the mariadb-5-5-24-release-notes advisory.

  - Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote     authenticated users to affect availability, related to GIS Extension. (CVE-2012-0540)

  - Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote     authenticated users to affect availability via unknown vectors related to Server Optimizer.
    (CVE-2012-1734)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to     affect availability via unknown vectors related to Server Optimizer. (CVE-2012-1735)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to     affect availability via unknown vectors. (CVE-2012-1756)

  - Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to     affect availability via unknown vectors related to InnoDB. (CVE-2012-1757)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.24 and is, therefore, affected by the following vulnerabilities :

  - Several errors exist related to 'GIS Extension',  'Server', 'InnoDB' and 'Server Optimizer' components that can allow denial of service attacks. (CVE-2012-0540, CVE-2012-1734, CVE-2012-1735, CVE-2012-1756, CVE-2012-1757)

  - A security bypass vulnerability exists that occurs due to improper casting during user login sessions. (Bug #64884 / CVE-2012-2122)

  - An error exists related to key length and sort order  index that can lead to application crashes. (Bug #59387 / CVE-2012-2749)

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.24 and is, therefore, affected by the following vulnerabilities :

  - Several errors exist related to 'GIS Extension',     'Server', 'InnoDB' and 'Server Optimizer' components     that can allow denial of service attacks.
    (CVE-2012-0540, CVE-2012-1734, CVE-2012-1735,     CVE-2012-1756, CVE-2012-1757)

  - A security bypass vulnerability exists that occurs due     to improper casting during user login sessions.
    (Bug #64884 / CVE-2012-2122)

  - An error exists related to key length and sort order     index that can lead to application crashes.
    (Bug #59387 / CVE-2012-2749)

ID	Name	Product	Family	Severity
167889	MariaDB 5.5.0 < 5.5.24 Multiple Vulnerabilities	Nessus	Databases	high
801157	MySQL Server 5.5 < 5.5.24 Multiple Unspecified Vulnerabilities	Log Correlation Engine	Database	medium
6515	Oracle MySQL Server 5.5 < 5.5.24 Multiple Unspecified Vulnerabilities	Nessus Network Monitor	Database	high
59449	MySQL 5.5 < 5.5.24 Security Bypass Vulnerability	Nessus	Databases	medium

Detections

Analytics

CVE-2012-1735

medium

Tenable Plugins

high

medium

high

medium