|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Mandrake Local Security Checks >> MDKSA-2005:060: MySQL Vulnerability Assessment Details
|
MDKSA-2005:060: MySQL |
||
Check for the version of the MySQL package Detailed Explanation for this Vulnerability Assessment The remote host is missing the patch for the advisory MDKSA-2005:060 (MySQL). A number of vulnerabilities were discovered by Stefano Di Paola in the MySQL server: If an authenticated user had INSERT rights on the 'mysql' database, the CREATE FUNCTION command permited that user to use libc functions to execute arbitrary code with the rights of the user running the database server (mysql) (CVE-2005-0709). If an authenticated user had INSERT rights on the 'mysql' database, it was possible to load a library located in an arbitrary directory by using INSERT INTO mysql.func instead of CREATE FUNCTION. This also would permit the user to execute arbitrary code with the rights of the user running the database server (CVE-2005-0710). Finally, temporary files belonging to tables created with CREATE TEMPORARY TABLE were handled in an insecure manner, permiting any local user to overwrite arbitrary files with the rights of the database server (CVE-2005-0711). The updated packages have been patched to correct these issues. Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:060 Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2005 Tenable Network Security |
||
Cables, Connectors |
Electric Vacuum Cleaner Air Duster Suction High Pressure for Computer Car Home
$9.97
Compressed Air Duster with Air Blower 100000RPM Vacuum Cleaner and Air Duster
$38.99
Electric Mini Air Duster Blower Vacuum Cleaner for PC Computer Laptop Dust
$30.95
Electric Vacuum Cleaner Air Duster Suction High Pressure for Computer Car Home
$10.87
Mini Computer Vacuum USB Keyboard Cleaner PC Laptop Brush Dust Cleaning Kit US
$11.29
3in1 Handheld Vacuum Keyboard Cleaner Dust Cleaning Laptop Desktop PC Computer
$18.59
KLIM Cool Laptop Cooler Fan, Portable Quiet Cooling Vacuum w/Display - BLUE LED
$15.95
Mini USB Keyboard Vacuum Cleaner PC Laptop Computer Brush Dust Cleaning Kit
$2.99
Duster Cleaner Blower & Vacuum Rechargeable
$79.99
2-In-1 Air Duster & Vacuum 60000 RPM Rechargeable Auto Computer Keyboard USB
$26.95
|
||
No Discussions have been posted on this vulnerability. |