The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.16. It is, therefore, affected by vulnerabilities in the following components :

  - DML
  - ENFED
  - Federated
  - MyISAM
  - Optimizer
  - Partition
  - Privileges
  - Replication
  - XML

MySQL was updated to version 5.5.37 to address various security issues.

More information is available at http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml#AppendixMSQL and http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.h tml#AppendixMSQL .

The remote host is affected by the vulnerability described in GLSA-201409-04 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the CVE identifiers referenced below for details.
  Impact :

    A local attacker could possibly gain escalated privileges. A remote       attacker could send a specially crafted SQL query, possibly resulting in       a Denial of Service condition. A remote attacker could entice a user to       connect to specially crafted MySQL server, possibly resulting in       execution of arbitrary code with the privileges of the process.
  Workaround :

    There is no known workaround at this time.

The version of MySQL installed on the remote host is older than 5.5.36 / 5.6.16, and is thus unpatched for vulnerabilities within the following components:

  - InnoDB
  - RBR
  - Client
  - DML
  - InnoDB
  - MyISAM
  - Optimizer
  - Partition
  - XML
  - Performance Schema
  - Privileges
  - Replication
  - Federated
  - Options 

ID	Name	Product	Family	Published	Updated	Severity
73573	MySQL 5.6.x < 5.6.16 Multiple Vulnerabilities	Nessus	Databases	4/16/2014	11/15/2018	medium
74373	SuSE 11.3 Security Update : MySQL (SAT Patch Number 9303)	Nessus	SuSE Local Security Checks	6/7/2014	1/19/2021	critical
77548	GLSA-201409-04 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	9/5/2014	1/6/2021	high
8211	Oracle MySQL 5.5.x <= 5.5.35 / 5.6.x <= 5.6.15 Multiple Vulnerabilities	Nessus Network Monitor	Database	4/21/2014	3/6/2019	medium

Detections

Analytics

Plugins Search

medium

critical

high

medium