MySQL < 5.0.51a / 5.1.23 / 6.0.4 Multiple Vulnerabilities

medium Nessus Plugin ID 17813

Synopsis

The remote database server is affected by multiple vulnerabilities.

Description

The version of MySQL installed on the remote host is earlier than 5.0.51a / 5.1.23 / 6.0.4 and thus reportedly affected by the following two vulnerabilities :

- An attacker may be able to cause the federated handler and daemon to crash when the federated engine issues a SHOW TABLE STATUS LIKE query by having a malicious server return a response with less than 14 columns.
(MySQL bug #29801 / CVE-2007-6304)

- It fails to update the DEFINER value of a view when that is altered, which could allow an authenticated user to gain additional access through the ALTER VIEW. (MySQL bug #29908 / CVE-2007-6303)

Solution

Upgrade to MySQL version 5.0.51a / 5.1.23 / 6.0.4 or later.

See Also

https://bugs.mysql.com/bug.php?id=29801

https://bugs.mysql.com/bug.php?id=29908

https://lists.mysql.com/announce/502

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html

Plugin Details

Severity: Medium

ID: 17813

File Name: mysql_6_0_4.nasl

Version: 1.9

Type: remote

Family: Databases

Published: 1/16/2012

Updated: 11/15/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:mysql:mysql

Required KB Items: Settings/ParanoidReport

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/14/2007

Reference Information

CVE: CVE-2007-6303, CVE-2007-6304

BID: 26832