| Description: | Description:
The remote host is missing an update to MySQL
announced via advisory MDKSA-2005:060.
A number of vulnerabilities were discovered by Stefano Di Paola in the
MySQL server:
If an authenticated user had INSERT privileges on the 'mysql' database,
the CREATE FUNCTION command allowed that user to use libc functions to
execute arbitrary code with the privileges of the user running the
database server (mysql) (CVE-2005-0709).
If an authenticated user had INSERT privileges on the 'mysql' database,
it was possible to load a library located in an arbitrary directory by
using INSERT INTO mysql.func instead of CREATE FUNCTION. This also
would allow the user to execute arbitrary code with the privileges of
the user running the database server (CVE-2005-0710).
Finally, temporary files belonging to tables created with CREATE
TEMPORARY TABLE were handled in an insecure manner, allowing any local
user to overwrite arbitrary files with the privileges of the database
server (CVE-2005-0711).
The updated packages have been patched to correct these issues.
Affected versions: 10.0, 10.1, Corporate 3.0,
Corporate Server 2.1
Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2005:060
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0709
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0710
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0711
Risk factor : Medium
CVSS Score:
4.6
|
