MySQL < 3.23.50 / 4.0.2 Local Code Execution

medium Nessus Plugin ID 17819

Language:

Synopsis

It may be possible to execute arbitrary code via the remote database server.

Description

The version of MySQL installed on the remote host is earlier than 3.23.50 or 4.0.2.

On Win32, these versions allow a local attacker to execute arbitrary code via a long 'datadir' parameter in the 'my.ini' file.

Solution

Upgrade to MySQL version 3.23.50 / 4.0.2 or later.

Plugin Details

Severity: Medium

ID: 17819

File Name: mysql_3_23_50_or_4_02.nasl

Version: 1.6

Type: Remote

Family: Databases

Published: 1/18/2012

Updated: 11/15/2018

Configuration: Enable paranoid mode

Supported Sensors: Frictionless Assessment Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.15

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:mysql:mysql

Required KB Items: Settings/ParanoidReport

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 10/1/2002

Reference Information

CVE: CVE-2002-0969

BID: 5853

Detections

Analytics