Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Parser.

The version of MariaDB installed on the remote host is prior to 10.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mariadb-10-0-4-release-notes advisory.

  - MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle     MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a     denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is     not properly handled when processing the binary representation of this feature, related to a numeric     calculation error. (CVE-2013-1861)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote     authenticated users to affect availability via unknown vectors related to Server Parser. (CVE-2013-3783)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and     earlier allows remote authenticated users to affect availability via unknown vectors related to Data     Manipulation Language. (CVE-2013-3793)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and     earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown     vectors related to Full Text Search. (CVE-2013-3802)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and     earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown     vectors related to Server Optimizer. (CVE-2013-3804)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and     earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log.
    (CVE-2013-3809)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and     earlier allows remote authenticated users to affect availability via unknown vectors related to Server     Replication. (CVE-2013-3812)

  - Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote     authenticated users to affect availability via unknown vectors related to Optimizer. (CVE-2016-0502)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the remote Junos Space version is prior to 13.3R1.8. It is, therefore, affected by multiple vulnerabilities in bundled third party software components :

  - Multiple vulnerabilities in RedHat JBoss application     server. (CVE-2010-0738, CVE-2010-1428, CVE-2010-1429,     CVE-2011-5245, CVE-2012-0818)

  - Multiple vulnerabilities in Oracle Java SE JDK.
    (CVE-2012-3143, CVE-2013-1537, CVE-2013-1557,     CVE-2013-2422)

  - Multiple vulnerabilities in Oracle MySQL server.
    (CVE-2013-1502, CVE-2013-1511, CVE-2013-1532,     CVE-2013-1544, CVE-2013-2375, CVE-2013-2376,     CVE-2013-2389, CVE-2013-2391, CVE-2013-2392,     CVE-2013-3783, CVE-2013-3793, CVE-2013-3794,     CVE-2013-3801, CVE-2013-3802, CVE-2013-3804,     CVE-2013-3805, CVE-2013-3808, CVE-2013-3809,     CVE-2013-3812, CVE-2013-3839)

  - Multiple vulnerabilities in Apache HTTP Server.
    (CVE-2013-1862, CVE-2013-1896)

  - Known hard-coded MySQL credentials. (CVE-2014-3413)

The version of MariaDB 5.5 running on the remote host is a version prior to 5.5.32. It is, therefore, potentially affected by the following vulnerabilities :

  - Errors exist related to the following subcomponents :
    Audit Log, Data Manipulation Language, Full Text Search,     GIS, Server Optimizer, Server Parser and     Server Replication. (CVE-2013-1861, CVE-2013-3783,     CVE-2013-3793, CVE-2013-3802, CVE-2013-3804,     CVE-2013-3809, CVE-2013-3812)

  - Errors exist in the files 'sql/item_func.cc',     'sql/item_sum.cc', 'sql/item_timefunc.cc',     'sql/opt_range.cc', 'sql/sql_derived.cc',     'sql/sql_insert.cc', 'sql/sql_select.cc',     'sql/sql_table.cc', 'sql/table.cc' and     'storage/innobase/mem/mem0mem.c' that could allow     denial of service attacks.

  - Errors exist in the functions or methods 'CONVERT_TZ     Item_func_min_max::get_date', 'my_decimal2decimal',     'setup_ref_array' and 'st_select_lex::nest_last_join'     that could allow denial of service attacks.

  - A buffer overflow error exists in the file     'sql/opt_range.cc' in the function     'QUICK_GROUP_MIN_MAX_SELECT::next_min' that could allow     denial of service attacks and possibly arbitrary code     execution

  - An unspecified issue exists in the file 'dbug/dbug.c'     in the macro 'str_to_buf' that has an unspecified     impact.

Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to a new upstream version, 5.5.33, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly incompatible changes. Please see the MySQL 5.5 Release Notes for further details :

  -     http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-     32.html
  -     http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-     33.html

In addition this update fixes two issues affecting specifically the mysql-5.5 Debian package :

A race condition in the post-installation script of the mysql-server-5.5 package creates the configuration file '/etc/mysql/debian.cnf' with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as credentials for the debian-sys-maint to perform administration tasks. (CVE-2013-2162 )

Matthias Reichl reported that the mysql-5.5 package misses the patches applied previous in Debian's mysql-5.1 to drop the database 'test' and the permissions that allow anonymous access, without a password, from localhost to the 'test' database and any databases starting with'test_'. This update reintroduces these patches for the mysql-5.5 package.

Existing databases and permissions are not touched. Please refer to the NEWS file provided with this update for further information.

This version upgrade of mysql to 5.5.33 fixed multiple security issues :

  - CVE-2013-1861 / CVE-2013-3783 / CVE-2013-3793 /     CVE-2013-3794

  - CVE-2013-3795 / CVE-2013-3796 / CVE-2013-3798 /     CVE-2013-3801

  - CVE-2013-3802 / CVE-2013-3804 / CVE-2013-3805 /     CVE-2013-3806

  - CVE-2013-3807 / CVE-2013-3808 / CVE-2013-3809 /     CVE-2013-3810

  - Additionally, it contains numerous bug fixes and     improvements.:. (CVE-2013-3811 / CVE-2013-3812)

  - fixed mysqldump with MySQL 5.0. (bnc#768832)

  - fixed log rights. (bnc#789263 and bnc#803040 and     bnc#792332)

  - binlog disabled in default configuration. (bnc#791863)

  - fixed dependencies for client package. (bnc#780019)

  - minor polishing of spec/installation

  - avoid file conflicts with mytop

  - better fix for hard-coded libdir issue

  - fixed hard-coded plugin paths. (bnc#834028)

  - use chown --no-dereference instead of chown to improve     security. (bnc#834967)

  - adjust to spell !includedir correctly in /etc/my.cnf.
    (bnc#734436)

  - typo in init script stops database on update     (bnc#837801)

This version upgrade of mysql to 5.5.32 fixes multiple security issues :

CVE-2013-1861 / CVE-2013-3783 / CVE-2013-3793 / CVE-2013-3794 / CVE-2013-3795 / CVE-2013-3796 / CVE-2013-3798 / CVE-2013-3801 / CVE-2013-3802 / CVE-2013-3804 / CVE-2013-3805 / CVE-2013-3806 / CVE-2013-3807 / CVE-2013-3808 / CVE-2013-3809 / CVE-2013-3810 / CVE-2013-3811 / CVE-2013-3812

Additionally, it contains numerous bug fixes and improvements. :

  - making mysqldump work with MySQL 5.0. (bnc#768832)

  - fixed log rights. (bnc#789263 and bnc#803040)

  - binlog disabled in default configuration. (bnc#791863)

  - fixed dependencies for client package. (bnc#780019)

  - minor polishing of spec/installation

  - avoiding file conflicts with mytop

  - better fix for hardcoded libdir issue

  - fix hardcoded plugin paths. (bnc#834028)

  - Use chown --no-dereference instead of chown to improve     security. (bnc#834967)

  - Adjust to spell !includedir correctly in /etc/my.cnf     (bnc#734436)

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 5.1.70 in Ubuntu 10.04 LTS. Ubuntu 12.04 LTS, Ubuntu 12.10 and Ubuntu 13.04 have been updated to MySQL 5.5.32.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information:
http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.
html.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of MySQL 5.6 installed on the remote host is earlier than 5.6.12. Therefore, affected by vulnerabilities in the following components :

 - Audit Log

  - Data Manipulation Language

  - Full Text Search

  - GIS

  - InnoDB

  - MemCached

  - Server Optimizer

  - Server Parser

  - Server Privileges

  - Server Replication

  - XA Transactions

The version of MySQL 5.5.x installed on the remote host is prior to 5.5.32. It is, therefore, affected by multiple vulnerabilities in the following components :

  - Audit Log
  - Data Manipulation Language
  - Full Text Search
  - GIS
  - Server : Optimizer
  - Server : Parser
  - Server : Replication

ID	Name	Product	Family	Severity
167906	MariaDB 10.0.0 < 10.0.4 Multiple Vulnerabilities	Nessus	Databases	medium
80195	Juniper Junos Space < 13.3R1.8 Multiple Vulnerabilities (JSA10627)	Nessus	Junos Local Security Checks	critical
72373	MariaDB 5.5 < 5.5.32 Multiple Vulnerabilities	Nessus	Databases	medium
71474	Debian DSA-2818-1 : mysql-5.5 - several vulnerabilities	Nessus	Debian Local Security Checks	medium
70328	SuSE 11.3 Security Update : mysql, mysql-client (SAT Patch Number 8364)	Nessus	SuSE Local Security Checks	medium
69511	SuSE 11.3 Security Update : MySQL (SAT Patch Number 8217)	Nessus	SuSE Local Security Checks	medium
69073	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : mysql-5.5, mysql-dfsg-5.1 vulnerabilities (USN-1909-1)	Nessus	Ubuntu Local Security Checks	medium
801397	MySQL 5.6.x < 5.6.12 Multiple Vulnerabilities	Log Correlation Engine	Database	medium
68938	MySQL 5.5 < 5.5.32 Multiple Vulnerabilities	Nessus	Databases	medium

Detections

Analytics

CVE-2013-3783

critical

Tenable Plugins

medium

critical

medium

medium

medium

medium

medium

medium

medium