The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.

MySQL Cluster 7.1.21 fixes several security issues and bugs. Please refer to the following upstream announcement for details :

http://dev.mysql.com/doc/refman/5.1/en/mysql-cluster-news-7-1.html

MySQL has been upgraded to version 5.0.96 to fix several vulnerabilities.

The version of MySQL Community Server installed on the remote host is earlier than 5.1.51 and is, therefore, potentially affected by multiple vulnerabilities:

  - A privilege escalation vulnerability exists when using     statement-based replication. Version specific comments     used on a master server with a lesser release version     than its slave can allow the MySQL privilege system on     the slave server to be subverted. (49124)

  - An authenticated user can crash the MySQL server by     passing improper WKB to the 'PolyFromWKB()' function.
    (51875)

  - The improper handling of type errors during argument     evaluation in extreme-value functions, e.g., 'LEAST()'     or 'GREATEST()' caused server crashes. (55826)

  - The creation of derived tables needing a temporary     grouping table caused server crashes. (55568)

  - The re-evaluation of a user-variable assignment     expression after the creation of a temporary table     caused server crashes. (55564)

  - The 'convert_tz()' function can be used to crash the     server by setting the timezone argument to an empty     SET column value. (55424)

  - The pre-evaluation of 'LIKE' predicates while preparing     a view caused server crashes. (54568)

  - The use of 'GROUP_CONCAT()' and 'WITH ROLLUP' caused     server crashes. (54476)

  - The use of an intermediate temporary table and queries     containing calls to 'GREATEST()' or 'LEAST()', having     a list of both numeric and 'LONGBLOB' arguments, caused     server crashes. (54461)

  - The use of nested joins in prepared statements or     stored procedures could result in infinite loops.
    (53544)

ID	Name	Product	Family	Type	Severity
74626	openSUSE Security Update : mysql-cluster (openSUSE-SU-2012:0617-1)	Nessus	SuSE Local Security Checks	Local	medium
64183	SuSE 11.1 Security Update : MySQL (SAT Patch Number 6613)	Nessus	SuSE Local Security Checks	Local	medium
49711	MySQL Community Server < 5.1.51 Multiple Vulnerabilities	Nessus	Databases	Remote	medium

Detections

Analytics

CVE-2009-5026

critical

Tenable Plugins

medium

medium

medium