Test ID:	1.3.6.1.4.1.25623.1.0.57319
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2006:158 (MySQL)
Summary:	Mandrake Security Advisory MDKSA-2006:158 (MySQL)
Description:	The remote host is missing an update to MySQL announced via advisory MDKSA-2006:158. MySQL before 4.1.13 allows local users to cause a denial of service (persistent replication slave crash) via a query with multiupdate and subselects. (CVE-2006-4380) There is a bug in the MySQL-Max (and MySQL) init script where the script was not waiting for the mysqld daemon to fully stop. This impacted the restart beahvior during updates, as well as scripted setups that temporarily stopped the server to backup the database files. (Bug #15724) The Corporate 3 and MNF2 products are not affected by these issues. Packages have been patched to correct these issues. Affected: 2006.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2006:158 http://qa.mandriva.com/show_bug.cgi?id=15724 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4380 Debian Security Information: DSA-1169 (Google Search) http://www.debian.org/security/2006/dsa-1169 http://www.mandriva.com/security/advisories?name=MDKSA-2006:158 BugTraq ID: 19794 http://www.securityfocus.com/bid/19794 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10686 http://securitytracker.com/id?1016790 http://secunia.com/advisories/21762 http://secunia.com/advisories/21712 Common Vulnerability Exposure (CVE) ID: CVE-2006-4389 Bugtraq: 20060913 Multiple Vulnerabilities in Apple QuickTime (Google Search) http://www.securityfocus.com/archive/1/archive/1/445888/100/0/threaded http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html http://security.gentoo.org/glsa/glsa-200803-08.xml Cert/CC Advisory: TA06-256A http://www.us-cert.gov/cas/techalerts/TA06-256A.html CERT/CC vulnerability note: VU#540348 http://www.kb.cert.org/vuls/id/540348 BugTraq ID: 19976 http://www.securityfocus.com/bid/19976 http://www.vupen.com/english/advisories/2006/3577 http://www.osvdb.org/28769 http://securitytracker.com/id?1016830 http://secunia.com/advisories/21893 http://secunia.com/advisories/29182 http://securityreason.com/securityalert/1554 XForce ISS Database: quicktime-flashpix-code-execution(28938) http://xforce.iss.net/xforce/xfdb/28938
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: