PT-2017-6471

Name of the Vulnerable Software and Affected Versions percona-toolkit versions prior to 2.2.13 xtrabackup versions prior to 2.2.9 Description The issue allows for silent HTTP downgrade attacks and Man In The Middle attacks. In these attacks, the server response can be modified, enabling the...

openSUSE Security Update : percona-toolkit / xtrabackup (openSUSE-2015-217)

Percona Toolkit and XtraBackup were updated to fix bugs and security issues. Percona XtraBackup was vulnerable to MITM attack which could allow exfiltration of MySQL configuration information via the --version-check option. boo919298 CVE-2015-1027 lp1408375. The openSUSE package has the version...

openSUSE Security Update : percona-toolkit (openSUSE-SU-2014:0361-1)

percona-toolkit was updated to 2.1.11 bnc864194 CVE-2014-2029 This improves sanitisation of input and output for commands run when performing a version check. This option is not the default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

openSUSE Security Update : percona-toolkit / xtrabackup (openSUSE-SU-2014:0333-1)

percona-toolkit and xtrabackup were updated : - disable automatic version check for all tools bnc864194 Prevents transmission of version information to an external host in the default configuration. CVE-2014-2029 Can be used by owner of a Percona Server or an attacker who can control this...

SuSE Update for percona-toolkit,xtrabackup openSUSE-SU-2014:0333-1 (percona-toolkit,xtrabackup)

Check for the Version of percona-toolkit,xtrabackup OpenVAS Vulnerability Test $Id: gbsuse201403331.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for percona-toolkit,xtrabackup openSUSE-SU-2014:0333-1 percona-toolkit,xtrabackup Authors: System Generated Check Copyright: Copyright C 2014...

openSUSE: Security Advisory for percona-toolkit, xtrabackup (openSUSE-SU-2014:0333-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

percona-toolkit,xtrabackup: disable remote version check (important)

percona-toolkit and xtrabackup were updated: - disable automatic version check for all tools bnc864194 Prevents transmission of version information to an external host in the default configuration. CVE-2014-2029 Can be used by owner of a Percona Server or an attacker who can control this...

PT-2017-5839

Name of the Vulnerable Software and Affected Versions: Percona Toolkit version 2.1 Description: The automatic version check functionality in Percona Toolkit allows man-in-the-middle attackers to obtain sensitive information or execute arbitrary code. This is possible due to the use of HTTP to...