Oracle MySQL Server 5.5.x < 5.5.23 Multiple Unspecified Vulnerabilities

Critical Nessus Network Monitor Plugin ID 6516

Synopsis

The remote database server is vulnerable to multiple attack vectors.

Description

Versions of MySQL 5.5.x prior to 5.5.23 are outdated and thus affected by two unspecified vulnerabilities related to the 'Server Optimizer' component.

Solution

Upgrade to MySQL version 5.5.23 later.

See Also

http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html

https://bugzilla.redhat.com/show_bug.cgi?format=multiple&amp;id=833742

http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Plugin Details

Severity: Critical

ID: 6516

File Name: 6516.prm

Family: Database

Published: 2012/07/16

Modified: 2016/01/15

Dependencies: 8914

Nessus ID: 59967

Risk Information

Risk Factor: Critical

CVSSv2

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSSv3

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:mysql:mysql

Patch Publication Date: 2012/04/12

Vulnerability Publication Date: 2012/04/12

Reference Information

CVE: CVE-2012-1689, CVE-2012-2750

BID: 54547, 63125