In MySQL 4.0.0 through 5.0.83, multiple format string vulnerabilities in the dispatch_command() function in libmysqld/sql_parse.cc in mysqld allow remote authenticated users to cause a denial of service (daemon crash) and potentially the execution of arbitrary code via format string specifiers in a database name in a COM_CREATE_DB or COM_DROP_DB request.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1289 advisory.

    - Add fix for CVE-2009-2446 (format string vulnerability in COM_CREATE_DB and       COM_DROP_DB processing)     Resolves: #512200
    - Back-port upstream fix for CVE-2008-4456 (mysql command line client XSS flaw)     Resolves: #502169
    - Update to MySQL 5.0.77, for numerous fixes described at       http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-77.html       including low-priority security issues CVE-2008-2079, CVE-2008-3963     Resolves: #448487, #448534, #452824, #453156, #455619, #456875     Resolves: #457218, #462534, #470036, #476896, #479615

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201201-02 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the CVE identifiers referenced below for details.
  Impact :

    An unauthenticated remote attacker may be able to execute arbitrary code       with the privileges of the MySQL process, cause a Denial of Service       condition, bypass security restrictions, uninstall arbitrary MySQL       plugins, or conduct Man-in-the-Middle and Cross-Site Scripting attacks.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.3.  Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server

  - Apache

  - CoreAudio

  - CoreMedia

  - CoreTypes

  - CUPS

  - DesktopServices

  - Disk Images

  - Directory Services

  - Dovecot

  - Event Monitor

  - FreeRADIUS

  - FTP Server

  - iChat Server

  - ImageIO

  - Image RAW

  - Libsystem

  - Mail

  - MySQL

  - OS Services

  - Password Server

  - PHP

  - Podcast Producer

  - Preferences

  - PS Normalizer

  - QuickTime

  - Ruby

  - Server Admin

  - SMB

  - Tomcat

  - Wiki Server

  - X11

ID	Name	Product	Family	Published	Updated	Severity
44742	Debian DSA-1877-1 : mysql-dfsg-5.0 - denial of service/execution of arbitrary code	Nessus	Debian Local Security Checks	2/24/2010	1/4/2021	high
180608	Oracle Linux 5 : mysql (ELSA-2009-1289)	Nessus	Oracle Linux Local Security Checks	9/7/2023	10/22/2024	high
57446	GLSA-201201-02 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/6/2012	1/6/2021	high
5489	Mac OS X < 10.6.3 Multiple Vulnerabilities	Nessus Network Monitor	Generic	3/30/2010	3/6/2019	critical

Detections

Analytics

Plugins Search

high

high

high

critical