The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-464:01 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation     consisting of a server daemon (mysqld) and many different client programs and libraries. The base package     contains the standard MySQL client programs and generic MySQL files. These updated packages upgrade MySQL     to version 5.
    Security issues fixed with this release:
    CVE-2015-0433     CVE-2015-0441     CVE-2015-0499     CVE-2015-0501     CVE-2015-0505     CVE-2015-2568     CVE-2015-2571     CVE-2015-2573     CVE-2015-2582     CVE-2015-2620     CVE-2015-2643     CVE-2015-2648     CVE-2015-4737     CVE-2015-4752     CVE-2015-4757

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote     authenticated users to affect confidentiality via unknown vectors related to Server : Security :
    Privileges. (CVE-2015-2620)

Note that Nessus relies on the presence of the package as reported by the vendor.

MySQL was updated to version 5.5.45, fixing bugs and security issues.

A list of all changes can be found on :

- http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-45.html

- http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-44.html

To fix the 'BACKRONYM' security issue (CVE-2015-3152) the behaviour of the SSL options was changed slightly to meet expectations: Now using '--ssl-verify-server-cert' and '--ssl[-*]' implies that the ssl connection is required. The mysql client will now print an error if ssl is required, but the server can not handle a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152]

Additional bugs fixed :

  - fix rc.mysql-multi script to start instances after     restart properly [bnc#934401].

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2674-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to     fix these issues.

    MySQL has been updated to 5.5.44 in Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 14.10. Ubuntu 15.04 has     been updated to MySQL 5.6.25.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-44.html     http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html     http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
289901	MiracleLinux 4 : mysql55-mysql-5.5.45-1.0.1.AXS4 (AXSA:2015-464:01)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	medium
218927	Linux Distros Unpatched Vulnerability : CVE-2015-2620	Nessus	Misc.	3/4/2025	8/21/2025	medium
86537	SUSE SLED11 / SLES11 Security Update : mysql (SUSE-SU-2015:1788-1) (BACKRONYM)	Nessus	SuSE Local Security Checks	10/22/2015	1/6/2021	medium
84915	Ubuntu 14.04 LTS : MySQL vulnerabilities (USN-2674-1)	Nessus	Ubuntu Local Security Checks	7/22/2015	8/27/2024	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium