Detections
Analytics
MySQL Community Server < 5.1.47 / 5.0.91 Multiple Vulnerabilities
medium Nessus Plugin ID 46702
Language:
Synopsis
The remote database server is affected by multiple vulnerabilities.Description
The version of MySQL Community Server installed on the remote host is earlier than 5.1.47 / 5.0.91 and is, therefore, potentially affected by the following vulnerabilities :- The server may continue reading packets indefinitely if it receives a packet larger than the maximum size of one packet, which could allow an unauthenticated, remote attacker to consume a high level of CPU and bandwidth. (Bug #50974)
- Using an overly long table name argument to the 'COM_FIELD_LIST' command, an authenticated user can overflow a buffer and execute arbitrary code on the affected host. (Bug #53237)
- Using a specially crafted table name argument to 'COM_FIELD_LIST', an authenticated user can bypass almost all forms of checks for privileges and table- level grants. (Bug #53371)
Solution
Upgrade to MySQL Community Server 5.1.47 / 5.0.91 or later.See Also
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
https://bugs.mysql.com/bug.php?id=50974
Plugin Details
Severity: Medium
ID: 46702
File Name: mysql_5_1_47.nasl
Version: 1.21
Type: remote
Family: Databases
Published: 5/24/2010
Updated: 11/15/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.4
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:mysql:mysql
Required KB Items: Settings/ParanoidReport
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/6/2010
Vulnerability Publication Date: 5/12/2010
Exploitable With
CANVAS (White_Phosphorus)