VID |
25118 |
Severity |
30 |
Port |
3306 |
Protocol |
TCP |
Class |
DB |
Detailed Description |
The version of MySQL 5.5 installed on the remote host is earlier than 5.5.23. As such, it is affected by a denial of service vulnerability related to the 'Server Optimizer' component.
* Note: This check solely relied on the banner of the remote MySQL server to assess this vulnerability, so this might be a false positive.
* References: http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html https://bugzilla.redhat.com/show_bug.cgi?format=multiple&id=833742 http://www.oracle.com/technetwork/topics/security/cpujul2012verbose-392736.html#Oracle%20MySQL |
Recommendation |
Upgrade to the latest version of MySQL (5.5.23 or later), available from the MySQL Web site at http://www.mysql.com/ |
Related URL |
CVE-2012-1689 (CVE) |
Related URL |
54547 (SecurityFocus) |
Related URL |
(ISS) |
|