Test ID:	1.3.6.1.4.1.25623.1.0.120190
Category:	Amazon Linux Local Security Checks
Title:	Amazon Linux: Security Advisory (ALAS-2014-428)
Summary:	The remote host is missing an update for the 'mysql55' package(s) announced via the ALAS-2014-428 advisory.
Description:	Summary: The remote host is missing an update for the 'mysql55' package(s) announced via the ALAS-2014-428 advisory. Vulnerability Insight: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: SERVER:SSL:yaSSL). Supported versions that are affected are 5.5.39 and earlier and 5.6.20 and earlier. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized takeover of MySQL Server possibly including arbitrary code execution within the MySQL Server. (CVE-2014-6491) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API SSL CERTIFICATE HANDLING). Supported versions that are affected are 5.5.39 and earlier and 5.6.20 and earlier. Difficult to exploit vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized read access to all MySQL Server accessible data. (CVE-2014-6559) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: SERVER:SSL:yaSSL). Supported versions that are affected are 5.5.39 and earlier and 5.6.20 and earlier. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized takeover of MySQL Server possibly including arbitrary code execution within the MySQL Server. (CVE-2014-6500) Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: CLIENT:SSL:yaSSL). Supported versions that are affected are 5.5.39 and earlier and 5.6.20 and earlier. Difficult to exploit vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2014-6494) Affected Software/OS: 'mysql55' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-6491 BugTraq ID: 70444 http://www.securityfocus.com/bid/70444 http://security.gentoo.org/glsa/glsa-201411-02.xml http://secunia.com/advisories/61579 http://secunia.com/advisories/62073 SuSE Security Announcement: SUSE-SU-2015:0743 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html Common Vulnerability Exposure (CVE) ID: CVE-2014-6494 BugTraq ID: 70497 http://www.securityfocus.com/bid/70497 Common Vulnerability Exposure (CVE) ID: CVE-2014-6500 BugTraq ID: 70478 http://www.securityfocus.com/bid/70478 Common Vulnerability Exposure (CVE) ID: CVE-2014-6559 BugTraq ID: 70487 http://www.securityfocus.com/bid/70487
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.