MySQL < 4.0.21 Remote GRANT Privilege Escalation

medium Log Correlation Engine Plugin ID 801119

Synopsis

The remote host is vulnerable to a flaw that allows attackers to retrieve sensitive files or data.

Description

The remote host is running a version of MySQL that is older than version 4.0.21.
It is vulnerable to a flaw that may allow an attacker to gain access to unauthorized databases. An attacker can exploit this vulnerability if he has GRANT privileges on databases containing '_'.

Solution

Upgrade to version 4.0.21 or higher.

Plugin Details

Severity: Medium

ID: 801119

Family: Database

Nessus ID: 15477

Reference Information

CVE: CVE-2004-0957

BID: 11432, 11435

Detections

Analytics