Test ID:	1.3.6.1.4.1.25623.1.0.801355
Category:	Databases
Title:	MySQL Multiple Vulnerabilities
Summary:	MySQL is prone to multiple vulnerabilities.
Description:	Summary: MySQL is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - An error in 'my_net_skip_rest()' function in 'sql/net_serv.cc' when handling a large number of packets that exceed the maximum length, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption). - buffer overflow when handling 'COM_FIELD_LIST' command with a long table name, allows remote authenticated users to execute arbitrary code. - directory traversal vulnerability when handling a '..' (dot dot) in a table name, which allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables. Vulnerability Impact: Successful exploitation could allow users to cause a denial of service and to execute arbitrary code. Affected Software/OS: MySQL 5.0.x before 5.0.91 and 5.1.x before 5.1.47 on all running platform. Solution: Upgrade to MySQL version 5.0.91 or 5.1.47. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1848 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:107 http://lists.mysql.com/commits/107532 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10258 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7210 http://www.redhat.com/support/errata/RHSA-2010-0442.html http://www.redhat.com/support/errata/RHSA-2010-0824.html http://securitytracker.com/id?1024031 SuSE Security Announcement: SUSE-SR:2010:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html SuSE Security Announcement: SUSE-SR:2010:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html http://www.ubuntu.com/usn/USN-1397-1 Common Vulnerability Exposure (CVE) ID: CVE-2010-1849 http://lists.mysql.com/commits/106060 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7328 http://securitytracker.com/id?1024032 Common Vulnerability Exposure (CVE) ID: CVE-2010-1850 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10846 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6693 http://securitytracker.com/id?1024033
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.