Korean
<< Back
VID 25011
Severity 40
Port 3306
Protocol TCP
Class DB
Detailed Description The version of MySQL is older than version 3.23.31.
MySQL versions prior to 3.23.31 are vulnerable to a buffer overflow attack. An attacker who knows a valid username and password can cause the server to crash and obtain a shell on the server via a buffer overflow.

* Note: This check solely relied on the version number of the remote MySQL server to assess this vulnerability, so this might be a false positive.
Recommendation Upgrade to the latest version of MySQL (3.23.31 or later), available from the MySQL Web site.
Related URL CVE-2001-1274 (CVE)
Related URL (SecurityFocus)
Related URL 5969 (ISS)