Debian DSA-2780-1 : mysql-5.1 - several vulnerabilities

Critical Nessus Plugin ID 70502

Synopsis

The remote Debian host is missing a security-related update.

Description

This DSA updates the MySQL database to 5.1.72. This fixes multiple unspecified security problems in the Optimizer component:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.h tml

Solution

Upgrade the mysql-5.1 packages.

For the oldstable distribution (squeeze), these problems have been fixed in version 5.1.72-2.

See Also

http://www.nessus.org/u?4b0d41c4

https://packages.debian.org/source/squeeze/mysql-5.1

https://www.debian.org/security/2013/dsa-2780

Plugin Details

Severity: Critical

ID: 70502

File Name: debian_DSA-2780.nasl

Version: 1.7

Type: local

Agent: unix

Published: 2013/10/20

Updated: 2018/11/13

Dependencies: 12634

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:mysql-5.1, cpe:/o:debian:debian_linux:6.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2013/10/18

Reference Information

CVE: CVE-2012-2750, CVE-2013-3839

BID: 63109, 63125

DSA: 2780