| VID |
25089 |
| Severity |
20 |
| Port |
3306 |
| Protocol |
TCP |
| Class |
DB |
| Detailed Description |
A version of MySQL which is older than 5.1.46 is running on the host. MySQL versions 5.x prior to 5.1.46 are Multiple Vulnerabilities.
- A local user may be able to issue a 'DROP TABLE' command for one MyISAM table and remove the data and index files of a different MyISAM table. (Bug #40980)
- The application does not correct check privileges in calls to 'UNINSTALL PLUGIN', which could be abused by an unprivileged user to uninstall plugins loaded
dynamically. (Bug #51770)
* Note: This check solely relied on the banner of the remote MySQL server to assess this vulnerability, so this might be a false positive.
* References:
http://bugs.mysql.com/bug.php?id=40980
http://bugs.mysql.com/bug.php?id=51770
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
* Platforms Affected:
MySQL versions 5.x prior to 5.1.46
Any operating system Any version |
| Recommendation |
Upgrade to the latest version of MySQL (5.1.46 or later), available from the MySQL Web site at http://www.mysql.com/ |
| Related URL |
CVE-2010-1621,CVE-2010-1626 (CVE) |
| Related URL |
39543,40257 (SecurityFocus) |
| Related URL |
(ISS) |
|
