ID de Prueba:	1.3.6.1.4.1.25623.1.0.801571
Categoría:	Databases
Título:	MySQL Multiple Denial of Service Vulnerabilities
Resumen:	The host is running MySQL and is prone to multiple denial of; service vulnerabilities.
Descripción:	Summary: The host is running MySQL and is prone to multiple denial of service vulnerabilities. Vulnerability Insight: The flaws are due to: - An error in propagating the type errors, which allows remote attackers to cause a denial of service via crafted arguments to extreme-value functions such as 'LEAST' or 'GREATEST'. - An unspecified error in vectors related to materializing a derived table that required a temporary table for grouping and user variable assignments. - An error in handling prepared statements that uses GROUP_CONCAT with the WITH ROLLUP modifier. - An error in handling a query that uses the GREATEST or LEAST function with a mixed list of numeric and LONGBLOB arguments. Vulnerability Impact: Successful exploitation could allow an attacker to cause a denial of service and to execute arbitrary code. Affected Software/OS: MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6. Solution: Upgrade to MySQL version 5.0.92, or 5.1.51 or 5.5.6. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	BugTraq ID: 43676 Common Vulnerability Exposure (CVE) ID: CVE-2010-3833 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html http://www.securityfocus.com/bid/43676 Debian Security Information: DSA-2143 (Google Search) http://www.debian.org/security/2011/dsa-2143 http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 http://www.mandriva.com/security/advisories?name=MDVSA-2010:223 http://bugs.mysql.com/bug.php?id=55826 http://www.redhat.com/support/errata/RHSA-2010-0825.html http://www.redhat.com/support/errata/RHSA-2011-0164.html http://secunia.com/advisories/42875 http://secunia.com/advisories/42936 TurboLinux Advisory: TLSA-2011-3 http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt http://www.ubuntu.com/usn/USN-1017-1 http://www.ubuntu.com/usn/USN-1397-1 http://www.vupen.com/english/advisories/2011/0105 http://www.vupen.com/english/advisories/2011/0170 http://www.vupen.com/english/advisories/2011/0345 XForce ISS Database: mysql-extremevalue-dos(64845) https://exchange.xforce.ibmcloud.com/vulnerabilities/64845 Common Vulnerability Exposure (CVE) ID: CVE-2010-3834 http://bugs.mysql.com/bug.php?id=55568 XForce ISS Database: mysql-derived-table-dos(64844) https://exchange.xforce.ibmcloud.com/vulnerabilities/64844 Common Vulnerability Exposure (CVE) ID: CVE-2010-3836 XForce ISS Database: mysql-view-preparation-dos(64842) https://exchange.xforce.ibmcloud.com/vulnerabilities/64842 Common Vulnerability Exposure (CVE) ID: CVE-2010-3837 XForce ISS Database: mysql-prepared-statement-dos(64841) https://exchange.xforce.ibmcloud.com/vulnerabilities/64841 Common Vulnerability Exposure (CVE) ID: CVE-2010-3838 http://bugs.mysql.com/bug.php?id=54461 XForce ISS Database: mysql-longblob-dos(64840) https://exchange.xforce.ibmcloud.com/vulnerabilities/64840
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.