ID de Prueba:	1.3.6.1.4.1.25623.1.0.811630
Categoría:	Databases
Título:	MySQL Privilege Escalation Vulnerability - Linux
Resumen:	MySQL is prone to a privilege escalation vulnerability.
Descripción:	Summary: MySQL is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists due to table creation option allows the use of the MySQL data directory in DATA DIRECTORY and INDEX DIRECTORY options. Vulnerability Impact: Successful exploitation of this vulnerability will allow an authenticated user to use the DATA DIRECTORY and INDEX DIRECTORY options to possibly bypass privilege checks. Affected Software/OS: MySQL version before 5.0.67 on Linux Solution: Upgrade to MySQL version 5.0.67. CVSS Score: 4.6 CVSS Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P
Referencia Cruzada:	BugTraq ID: 29106 Common Vulnerability Exposure (CVE) ID: CVE-2008-4098 Debian Security Information: DSA-1662 (Google Search) http://www.debian.org/security/2008/dsa-1662 http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25 http://www.openwall.com/lists/oss-security/2008/09/09/20 http://www.openwall.com/lists/oss-security/2008/09/16/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10591 http://www.redhat.com/support/errata/RHSA-2009-1067.html http://www.redhat.com/support/errata/RHSA-2010-0110.html http://secunia.com/advisories/32578 http://secunia.com/advisories/32759 http://secunia.com/advisories/32769 http://secunia.com/advisories/38517 SuSE Security Announcement: SUSE-SR:2008:025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html http://www.ubuntu.com/usn/USN-1397-1 http://www.ubuntu.com/usn/USN-671-1 http://ubuntu.com/usn/usn-897-1 XForce ISS Database: mysql-myisam-symlink-security-bypass(45649) https://exchange.xforce.ibmcloud.com/vulnerabilities/45649
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.