Detections
Analytics
MySQL < 3.23.56 Local Privilege Escalation
high Log Correlation Engine Plugin ID 801167
Synopsis
The remote host is vulnerable to a local 'privilege escalation' flaw.Description
The remote host is running a version of MySQL which is older than version 3.23.56. A vulnerability exists that may allow the mysqld service to start with elevated privileges. An attacker can exploit this vulnerability by creating a DATADIR/my.cnf that includes the line 'user'.Solution
Upgrade to version 3.23.56 or higher.See Also
Plugin Details
Severity: High
ID: 801167
Family: Database
Nessus ID: 11378
Reference Information
CVE: CVE-2003-0073, CVE-2003-0150