Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Oracle MySQL Multiple Vulnerabilities



The remote host is vulnerable to multiple attack vectors.


The remote host is running a version of MySQL that is older than version 4.0.24. This version of MySQL is vulnerable to multiple remote attacks. Specifically 1) The MySQL is vulnerable to a flaw where the database temporary files are world-writeable and use a common name syntax. An attacker may be able to guess a file name and inject data into the temp file. 2) Authenticated users that have 'CREATE TEMPORARY TABLE' privileges will be able to corrupt MySQL files with the privileges of the MySQL process 3) Authenticated users with the 'INSERT' and 'DELETE' privileges may be able to escalate their database rights due to an input validation error in MySQL 4) Authenticated users that have 'INSERT' and 'DELETE' privileges may also abuse the 'CREATE FUNCTION' statement in order to gain access to restricted data structures.


Upgrade to version 4.0.24, 4.1.10a or higher.