Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> SuSE Local Security Checks >> SUSE-SA:2003:042: mysql


Vulnerability Assessment Details

SUSE-SA:2003:042: mysql

Vulnerability Assessment Summary
Check for the version of the mysql package

Detailed Explanation for this Vulnerability Assessment

The remote host is missing the patch for the advisory SUSE-SA:2003:042 (mysql).


A remotely exploitable buffer overflow within the authentication code
of MySQL has been reported. This permits remote attackers who have
access to the 'User' table to execute arbitrary commands as mysql user.
The list of affected packages is as follows:
mysql, mysql-client, mysql-shared, mysql-bench, mysql-devel, mysql-Max.
In this advisory the MD5 sums for the mysql, mysql-shared and mysql-devel
packages are listed.

To be sure the update takes effect you have to restart the MySQL server
by executing the following command as root:

/usr/sbin/rcmysql restart

Please download the update package for your distribution and verify its
integrity by the methods listed in section 3) of this announcement.
Then, install the package using the command 'rpm -Fhv file.rpm' to apply
the update.

Solution : http://www.suse.de/security/2003_042_mysql.html
Network Security Threat Level: Medium

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors


Dell PowerEdge R640 Server 2x Gold 6150 2.70Ghz 36-Core 256GB 2x 960GB SSD H730P picture

Dell PowerEdge R640 Server 2x Gold 6150 2.70Ghz 36-Core 256GB 2x 960GB SSD H730P

$1737.25



Dell R740XD 24SFF+4SFF 2.8Ghz 56-C 256GB H740P 10G SFP+ NIC 2x1100W 12x Trays picture

Dell R740XD 24SFF+4SFF 2.8Ghz 56-C 256GB H740P 10G SFP+ NIC 2x1100W 12x Trays

$4704.08



Dell PowerEdge R740xd Server 2x Gold 6140 2.30Ghz 36-Core 512GB H330 picture

Dell PowerEdge R740xd Server 2x Gold 6140 2.30Ghz 36-Core 512GB H330

$2194.80



Dell R740XD 24SFF 12 NVMe 2.1Ghz 32-C 256GB H730P 2x10G+2x1G NIC 2x1100W Rails picture

Dell R740XD 24SFF 12 NVMe 2.1Ghz 32-C 256GB H730P 2x10G+2x1G NIC 2x1100W Rails

$3932.07



INTEL XEON GOLD 6148 20 Core SR3B6 2.4GHZ 27.5MB Processor    @24 picture

INTEL XEON GOLD 6148 20 Core SR3B6 2.4GHZ 27.5MB Processor @24

$99.99



Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5 picture

Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5

$46.00



Intel Xeon Gold 6140 SR3AX 2.3GHz 18-Core Processor CPU picture

Intel Xeon Gold 6140 SR3AX 2.3GHz 18-Core Processor CPU

$39.99



Intel Xeon E5-2690V2 3.00GHz 10-Core (SR1A5) Processor CPU READ DESCRIPTION picture

Intel Xeon E5-2690V2 3.00GHz 10-Core (SR1A5) Processor CPU READ DESCRIPTION

$12.00



HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram 512 SSD Quadro K420 Linux GA picture

HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram 512 SSD Quadro K420 Linux GA

$243.59



Dell Precision 5810 Tower Intel Xeon E5-1603v3 2.8GHz 8GB RAM 500GB HDD W10P GPU picture

Dell Precision 5810 Tower Intel Xeon E5-1603v3 2.8GHz 8GB RAM 500GB HDD W10P GPU

$129.99



Discussions

No Discussions have been posted on this vulnerability.