Detections
Analytics
FreeBSD : MySQL authentication bypass / buffer overflow (e5e2883d-ceb9-11d8-8898-000d6111a684)
critical Nessus Plugin ID 19149
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
By submitting a carefully crafted authentication packet, it is possible for an attacker to bypass password authentication in MySQL 4.1. Using a similar method, a stack buffer used in the authentication mechanism can be overflowed.Solution
Update the affected packages.See Also
http://www.nextgenss.com/advisories/mysql-authbypass.txt
https://dev.mysql.com/doc/mysql/en/News-4.1.3.html
Plugin Details
Severity: Critical
ID: 19149
File Name: freebsd_pkg_e5e2883dceb911d88898000d6111a684.nasl
Version: 1.23
Type: local
Family: FreeBSD Local Security Checks
Published: 7/13/2005
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.3
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:mysql-server, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/5/2004
Vulnerability Publication Date: 7/1/2004
Exploitable With
CANVAS (CANVAS)
Reference Information
CVE: CVE-2004-0627, CVE-2004-0628