SuSE9 Security Update : MySQL (YOU Patch Number 12456)
high Nessus Plugin ID 41313
Synopsis
The remote SuSE 9 host is missing a security-related patch.Description
This update is provided as RPM packages that can easily be installed onto a running system by using the YaST online update module.- the COM_CREATE_DB and COM_DROP_DB suffered from format string vulnerabilities. (CVE-2009-2446)
- the command line client was prone to cross-site scripting (XSS) attacks. (CVE-2008-4456)
Additionally a problem that sometimes prevented slave hosts from reconnecting to the master server has been fixed.
Solution
Apply YOU patch number 12456.See Also
Plugin Details
Severity: High
ID: 41313
File Name: suse9_12456.nasl
Version: 1.9
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 9/24/2009
Updated: 1/14/2021
Supported Sensors: Nessus Agent
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 8.5
Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:suse:suse_linux
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 7/17/2009
Reference Information
CVE: CVE-2008-4456, CVE-2009-2446