Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a     Security Fix, aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816,     Oracle has not commented on this possibility. (CVE-2012-2750)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of MariaDB installed on the remote host is prior to 5.5.23. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.23 advisory.

  - Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a     Security Fix, aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816,     Oracle has not commented on this possibility. (CVE-2012-2750)

  - Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote     authenticated users to affect availability via unknown vectors related to Server Optimizer.
    (CVE-2012-1689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This DSA updates the MySQL database to 5.1.72. This fixes multiple unspecified security problems in the Optimizer component:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.h tml

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.71.  It is, therefore, potentially affected by multiple denial of service vulnerabilities in the 'Server Optimizer' component. 

Note: Oracle has provided a workaround to address the issue for CVE-2012-2750.

Versions of MySQL 5.5.x prior to 5.5.23 are outdated and thus affected by two unspecified vulnerabilities related to the 'Server Optimizer' component.

The version of MySQL 5.5 installed on the remote host is a version prior to 5.5.23.  As such, it is affected by two unspecified vulnerabilities related to the 'Server Optimizer' component.

ID	Name	Product	Family	Type	Severity
217626	Linux Distros Unpatched Vulnerability : CVE-2012-2750	Nessus	Misc.	Local	critical
167899	MariaDB 5.5.0 < 5.5.23 Multiple Vulnerabilities	Nessus	Databases	Combined	critical
70502	Debian DSA-2780-1 : mysql-5.1 - several vulnerabilities	Nessus	Debian Local Security Checks	Local	critical
70461	MySQL 5.1 < 5.1.71 Server Optimizer Denial of Service	Nessus	Databases	Remote	critical
6516	Oracle MySQL Server 5.5.x < 5.5.23 Multiple Unspecified Vulnerabilities	Nessus Network Monitor	Database		critical
59967	MySQL 5.5 < 5.5.23 Multiple Unspecified Vulnerabilities	Nessus	Databases	Remote	critical

Detections

Analytics

CVE-2012-2750

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical