Test ID:	1.3.6.1.4.1.25623.1.0.100356
Category:	Databases
Title:	MySQL multiple Vulnerabilities
Summary:	MySQL is prone to a security-bypass vulnerability and to a local; privilege-escalation vulnerability.
Description:	Summary: MySQL is prone to a security-bypass vulnerability and to a local privilege-escalation vulnerability. Vulnerability Impact: An attacker can exploit the security-bypass issue to bypass certain security restrictions and obtain sensitive information that may lead to further attacks. Local attackers can exploit the local privilege-escalation issue to gain elevated privileges on the affected computer. Affected Software/OS: Versions prior to MySQL 5.1.41 are vulnerable. Solution: Updates are available. Please see the references for details. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	BugTraq ID: 37075 BugTraq ID: 37076 Common Vulnerability Exposure (CVE) ID: CVE-2009-4028 http://lists.mysql.com/commits/87446 http://www.openwall.com/lists/oss-security/2009/11/19/3 http://marc.info/?l=oss-security&m=125881733826437&w=2 http://www.openwall.com/lists/oss-security/2009/11/23/16 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10940 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8510 http://www.redhat.com/support/errata/RHSA-2010-0109.html SuSE Security Announcement: SUSE-SR:2010:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html http://www.vupen.com/english/advisories/2010/1107 Common Vulnerability Exposure (CVE) ID: CVE-2009-4030 http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html Debian Security Information: DSA-1997 (Google Search) http://www.debian.org/security/2010/dsa-1997 http://lists.mysql.com/commits/89940 http://marc.info/?l=oss-security&m=125908040022018&w=2 http://marc.info/?l=oss-security&m=125908080222685&w=2 http://www.openwall.com/lists/oss-security/2009/11/24/6 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11116 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8156 http://www.redhat.com/support/errata/RHSA-2010-0110.html http://secunia.com/advisories/38517 http://secunia.com/advisories/38573 SuSE Security Announcement: SUSE-SR:2010:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html http://www.ubuntu.com/usn/USN-1397-1 http://ubuntu.com/usn/usn-897-1
Copyright	This script is Copyright (C) 2009 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.