Detections
Analytics
MySQL < 3.23.55 Double Free() Overflow
high Log Correlation Engine Plugin ID 801161
Synopsis
The remote host is vulnerable to a buffer overflow.Description
The remote host is running a version of MySQL which is older than version 3.23.55. If you have not patched this version, then any attacker with a valid username may crash this service remotely by exploiting a double free bug.Further exploitation to gain a shell on the host may also be possible.
Solution
Upgrade to MySQL 3.23.55 or higher.Plugin Details
Severity: High
ID: 801161
Family: Database
Nessus ID: 11299
Risk Information
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 6.7
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
Reference Information
CVE: CVE-2003-0073, CVE-2003-0150