Detections
Analytics
Oracle MySQL < 3.23.56 Local Privilege Escalation
high Nessus Network Monitor Plugin ID 1900
Synopsis
The remote host is vulnerable to a local 'privilege escalation' flaw.Description
The remote host is running a version of MySQL which is older than version 3.23.56. A vulnerability exists that may allow the mysqld service to start with elevated privileges. An attacker can exploit this vulnerability by creating a DATADIR/my.cnf that includes the line 'user'.Solution
Upgrade to version 3.23.56 or higher.See Also
http://archives.neohapsis.com/archives/bugtraq/2003-03/0143.html
http://archives.neohapsis.com/archives/bugtraq/2003-03/0154.html
Plugin Details
Severity: High
ID: 1900
Family: Database
Published: 8/20/2004
Updated: 3/6/2019
Nessus ID: 11378
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 8.2
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:mysql:mysql
Reference Information
CVE: CVE-2003-0073, CVE-2003-0150