Detections
Analytics
MySQL Community Server < 5.1.47 / 5.0.91 Multiple Vulnerabilities
medium Nessus Network Monitor Plugin ID 5587
Synopsis
The remote database server is vulnerable to multiple attack vectors.Description
Versions of MySQL server earlier than 5.1.47 / 5.0.91 are potentially affected by the following vulnerabilities :
- The server may continue reading packets indefinitely if it receives a packet larger than the maximum size of one packet, which could allow an unauthenticated remote attacker to consume a high level of CPU and bandwidth. (Bug #50974)
- Using an overly long table name argument to the 'COM_FIELD_LIST' command, an authenticated user can overflow a buffer and execute arbitrary code on the affected host. (Bug #53237)
- Using a specially crafted table name argument to 'COM_FIELD_LIST', an authenticated user can bypass almost all forms of checks for privileges and table-level grants. (Bug #53371)
Solution
Upgrade to MySQL Community Server 5.0.91, 5.1.47, or later.See Also
http://bugs.mysql.com/bug.php?id=50974
http://bugs.mysql.com/bug.php?id=53237
http://bugs.mysql.com/bug.php?id=53371
Plugin Details
Severity: Medium
ID: 5587
Family: Database
Published: 6/29/2010
Updated: 3/6/2019
Nessus ID: 46702
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 4.9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:mysql:community_server
Patch Publication Date: 5/6/2010
Vulnerability Publication Date: 5/12/2010
Exploitable With
CANVAS (White_Phosphorus)