Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.

The version of MariaDB installed on the remote host is prior to 5.5.23. It is, therefore, affected by multiple vulnerabilities as referenced in the mariadb-5-5-23-release-notes advisory.

  - Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote     authenticated users to affect availability via unknown vectors related to Server Optimizer.
    (CVE-2012-1689)

  - Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a     Security Fix, aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816,     Oracle has not commented on this possibility. (CVE-2012-2750)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This DSA updates the MySQL database to 5.1.72. This fixes multiple unspecified security problems in the Optimizer component:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.h tml

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.71.  It is, therefore, potentially affected by multiple denial of service vulnerabilities in the 'Server Optimizer' component. 

Note: Oracle has provided a workaround to address the issue for CVE-2012-2750.

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.23. As such, it is reportedly affected by an as yet unspecified vulnerability.

Versions of MySQL 5.5.x prior to 5.5.23 are outdated and thus affected by two unspecified vulnerabilities related to the 'Server Optimizer' component.

The version of MySQL 5.5 installed on the remote host is a version prior to 5.5.23.  As such, it is affected by two unspecified vulnerabilities related to the 'Server Optimizer' component.

ID	Name	Product	Family	Severity
167899	MariaDB 5.5.0 < 5.5.23 Multiple Vulnerabilities	Nessus	Databases	critical
70502	Debian DSA-2780-1 : mysql-5.1 - several vulnerabilities	Nessus	Debian Local Security Checks	critical
70461	MySQL 5.1 < 5.1.71 Server Optimizer Denial of Service	Nessus	Databases	critical
801129	MySQL Server 5.5 < 5.5.23 Multiple Unspecified Vulnerabilities	Log Correlation Engine	Database	medium
6516	Oracle MySQL Server 5.5.x < 5.5.23 Multiple Unspecified Vulnerabilities	Nessus Network Monitor	Database	critical
59967	MySQL 5.5 < 5.5.23 Multiple Unspecified Vulnerabilities	Nessus	Databases	critical

Detections

Analytics

CVE-2012-2750

critical

Tenable Plugins

critical

critical

critical

medium

critical

critical