ID de Prueba:	1.3.6.1.4.1.25623.1.0.100356
Categoría:	Databases
Título:	MySQL multiple Vulnerabilities
Resumen:	MySQL is prone to a security-bypass vulnerability and to a local; privilege-escalation vulnerability.
Descripción:	Summary: MySQL is prone to a security-bypass vulnerability and to a local privilege-escalation vulnerability. Vulnerability Impact: An attacker can exploit the security-bypass issue to bypass certain security restrictions and obtain sensitive information that may lead to further attacks. Local attackers can exploit the local privilege-escalation issue to gain elevated privileges on the affected computer. Affected Software/OS: Versions prior to MySQL 5.1.41 are vulnerable. Solution: Updates are available. Please see the references for details. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	BugTraq ID: 37075 BugTraq ID: 37076 Common Vulnerability Exposure (CVE) ID: CVE-2009-4028 http://lists.mysql.com/commits/87446 http://www.openwall.com/lists/oss-security/2009/11/19/3 http://marc.info/?l=oss-security&m=125881733826437&w=2 http://www.openwall.com/lists/oss-security/2009/11/23/16 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10940 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8510 http://www.redhat.com/support/errata/RHSA-2010-0109.html SuSE Security Announcement: SUSE-SR:2010:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html http://www.vupen.com/english/advisories/2010/1107 Common Vulnerability Exposure (CVE) ID: CVE-2009-4030 http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html Debian Security Information: DSA-1997 (Google Search) http://www.debian.org/security/2010/dsa-1997 http://lists.mysql.com/commits/89940 http://marc.info/?l=oss-security&m=125908040022018&w=2 http://marc.info/?l=oss-security&m=125908080222685&w=2 http://www.openwall.com/lists/oss-security/2009/11/24/6 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11116 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8156 http://www.redhat.com/support/errata/RHSA-2010-0110.html http://secunia.com/advisories/38517 http://secunia.com/advisories/38573 SuSE Security Announcement: SUSE-SR:2010:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html http://www.ubuntu.com/usn/USN-1397-1 http://ubuntu.com/usn/usn-897-1
Copyright	This script is Copyright (C) 2009 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.