ID de Prueba:	1.3.6.1.4.1.25623.1.0.55580
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLSA-2005:1023 (MySQL)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLSA-2005:1023. This announcement fixes a stack-based buffer overflow in the init_syms function in MySQL that allowed remotely authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001023 http://www.mysql.com/products/mysql/ Risk factor : Medium CVSS Score: 4.6
Referencia Cruzada:	BugTraq ID: 14509 Common Vulnerability Exposure (CVE) ID: CVE-2005-2558 http://www.securityfocus.com/bid/14509 Bugtraq: 20050808 [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions (Google Search) http://marc.info/?l=bugtraq&m=112354450412427&w=2 Debian Security Information: DSA-829 (Google Search) http://www.debian.org/security/2005/dsa-829 Debian Security Information: DSA-831 (Google Search) http://www.debian.org/security/2005/dsa-831 Debian Security Information: DSA-833 (Google Search) http://www.debian.org/security/2005/dsa-833 http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html http://www.mandriva.com/security/advisories?name=MDKSA-2005:163 http://www.appsecinc.com/resources/alerts/mysql/2005-002.html SCO Security Bulletin: SCOSA-2006.18 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt http://secunia.com/advisories/17027 http://secunia.com/advisories/20381 http://secunia.com/advisories/29847 http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1 SuSE Security Announcement: SUSE-SR:2005:021 (Google Search) http://www.novell.com/linux/security/advisories/2005_21_sr.html https://www.ubuntu.com/usn/usn-180-1/ https://www.ubuntu.com/usn/usn-180-2/ http://www.vupen.com/english/advisories/2008/1326/references XForce ISS Database: mysql-user-defined-function-bo(21737) https://exchange.xforce.ibmcloud.com/vulnerabilities/21737
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.