Test ID:	1.3.6.1.4.1.25623.1.0.51019
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2003:282
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2003:282. MySQL is a multi-user, multi-threaded SQL database server. Frank Denis reported a bug in unpatched versions of MySQL prior to version 3.23.58. Passwords for MySQL users are stored in the Password field of the user table. Under this bug, a Password field with a value greater than 16 characters can cause a buffer overflow. It may be possible for an attacker with the ability to modify the user table to exploit this buffer overflow to execute arbitrary code as the MySQL user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0780 to this issue. Users of MySQL are advised to upgrade to these erratum packages containing MySQL 3.23.58, which is not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2003-282.html http://www.mysql.com/doc/en/News-3.23.58.html http://www.mysql.com/doc/en/News-3.23.57.html Risk factor : Critical CVSS Score: 9.0
Cross-Ref:	BugTraq ID: 8590 Common Vulnerability Exposure (CVE) ID: CVE-2003-0780 Bugtraq: 20030910 Buffer overflow in MySQL (Google Search) http://www.securityfocus.com/archive/1/337012 Bugtraq: 20030913 exploit for mysql -- [get_salt_from_password] problem (Google Search) http://marc.info/?l=bugtraq&m=106364207129993&w=2 CERT/CC vulnerability note: VU#516492 http://www.kb.cert.org/vuls/id/516492 Conectiva Linux advisory: CLA-2003:743 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743 Debian Security Information: DSA-381 (Google Search) http://www.debian.org/security/2003/dsa-381 En Garde Linux Advisory: ESA-20030918-025 http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.html http://www.mandriva.com/security/advisories?name=MDKSA-2003:094 http://www.redhat.com/support/errata/RHSA-2003-281.html http://www.redhat.com/support/errata/RHSA-2003-282.html http://secunia.com/advisories/9709 http://marc.info/?l=bugtraq&m=106381424420775&w=2
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.