Lucene search

K
nessusTenable801134.PRM
HistoryJul 13, 2012 - 12:00 a.m.

MySQL Server 5.1 < 5.1.63 Multiple Vulnerabilities

2012-07-1300:00:00
Tenable
www.tenable.com
15

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.63 and is, therefore, affected by the following vulnerabilities :

  • Several errors exist related to โ€˜GIS Extensionโ€™ and โ€˜Server Optimizerโ€™ components that can allow denial of service attacks. (CVE-2012-0540, CVE-2012-1689, CVE-2012-1734)

  • A security bypass vulnerability exists that occurs due to improper casting during user login sessions. (Bug #64884 / CVE-2012-2122)

  • An error exists related to key length and sort order index that can lead to application crashes. (Bug #59387 / CVE-2012-2749

Binary data 801134.prm

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%