The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - mysql: Server: Partition unspecified vulnerability (CPU Jan 2018) (CVE-2018-2562)

  - mysql: Server: Replication unspecified vulnerability (CPU Apr 2018) (CVE-2018-2755)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and     earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation.
    (CVE-2012-3160)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Detections

Analytics

RHEL 5 : mysql (Unpatched Vulnerability)

high Nessus Plugin ID 198625

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Oct 22, 2024, 8:01 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410220801
Version 1.2 Jun 4, 2024, 8:32 AM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202406040832
Version 1.1 Jun 4, 2024, 3:18 AM New Plugin Feed: 202406040318