GLSA-200804-04 : MySQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-04 MySQL: Multiple vulnerabilities Multiple vulnerabilities have been reported in MySQL: Mattias Jonsson reported that a 'RENAME TABLE' command against a table with explicit 'DATA DIRECTORY' and 'INDEX DIRECTORY' options...

MySQL: Multiple vulnerabilities

Background MySQL is a popular multi-threaded, multi-user SQL server. Description Multiple vulnerabilities have been reported in MySQL: Mattias Jonsson reported that a "RENAME TABLE" command against a table with explicit "DATA DIRECTORY" and "INDEX DIRECTORY" options would overwrite the file to...

Debian Security Advisory DSA 1451-1 (mysql-dfsg-5.0)

The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1451-1. OpenVAS Vulnerability Test $Id: deb14511.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1451-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

Debian DSA-1451-1 : mysql-dfsg-5.0 - several vulnerabilities

Several local/remote vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3781 It was discovered that the privilege validation for the source table of CREATE TABLE LIKE statements was...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : mysql-dfsg-5.0 vulnerabilities (USN-559-1)

Joe Gallo and Artem Russakovskii discovered that the InnoDB engine in MySQL did not properly perform input validation. An authenticated user could use a crafted CONTAINS statement to cause a denial of service. CVE-2007-5925 It was discovered that under certain conditions MySQL could be made to...

USN-559-1: MySQL vulnerabilities

Joe Gallo and Artem Russakovskii discovered that the InnoDB engine in MySQL did not properly perform input validation. An authenticated user could use a crafted CONTAINS statement to cause a denial of service. CVE-2007-5925 It was discovered that under certain conditions MySQL could be made to...

MySQL Server权限提升及拒绝服务漏洞

BUGTRAQ ID: 26832br / CVECAN ID: CVE-2007-6303,CVE-2007-6304br / br / MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。br / br / 在视图已经更改时MySQL没有更新视图的DEFINER值，这允许已认证的远程攻击者通过一系列的CREATE SQL SECURITY DEFINER VIEW和ALTER VIEW语句获得权限提升。 br / br / MySQL的federated引擎在执行某些SHOW TABLE...

MySQL Enterprise Server 5.0 < 5.0.52 Multiple Vulnerabilities

The version of MySQL Enterprise Server 5.0 installed on the remote host is earlier than 5.0.52. Such versions reportedly are affected by the following issues : - Using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options can be used to overwrite system table...

MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities

The version of MySQL Server installed on the remote host reportedly is affected by the following issues : - It is possible, by creating a partitioned table using the DATA DIRECTORY and INDEX DIRECTORY options, to gain privileges on other tables having the same name as the partitioned table. Bug...

Oracle MySQL Enterprise Server < 5.0.52 Multiple Vulnerabilities

Binary data 4312.prm...

MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities

Binary data 4313.prm...

Code injection

The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service federated handler crash and daemon crash via a response that lacks the minimum required numb...

CVE-2007-6304

The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service federated handler crash and daemon crash via a response that lacks the minimum required numb...

CVE-2007-6304

The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service federated handler crash and daemon crash via a response that lacks the minimum required numb...

CVE-2007-6304

CVE-2007-6304 affects MySQL federated engine across 5.0.x (pre-5.0.51a), 5.1.x (pre-5.1.23), and 6.0.x (pre-6.0.4). The issue arises when the federated engine processes a SHOW TABLE STATUS query and a malicious remote server returns a response with fewer than the required 14 columns, which can cr...

CVE-2007-6304

The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service federated handler crash and daemon crash via a response that lacks the minimum required numb...

Solaris 8 (sparc) : 116997-01

SunOS 5.8: Federated Naming Service FNS X500 patch. Date this patch was last updated by Sun : May/04/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

CVE-2005-1518

Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services FNS, autofs, and FNS X.500 configuration, allows local users to cause a denial of service automountd crash when "accessing" /xfn/x500...

CVE-2005-1518

Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services FNS, autofs, and FNS X.500 configuration, allows local users to cause a denial of service automountd crash when "accessing" /xfn/x500...