Test Kennung:	1.3.6.1.4.1.25623.1.0.54201
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: mysql-server
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: mysql-server CVE-2005-1636 mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents. Solution: Update your system with the appropriate patches or software upgrades. http://www.zataz.net/adviso/mysql-05172005.txt http://www.vuxml.org/freebsd/eeae6cce-d05c-11d9-9aed-000e0c2e438a.html CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 13660 Common Vulnerability Exposure (CVE) ID: CVE-2005-1636 http://www.securityfocus.com/bid/13660 http://marc.info/?l=full-disclosure&m=111632686805498&w=2 http://www.mandriva.com/security/advisories?name=MDKSA-2006:045 http://www.zataz.net/adviso/mysql-05172005.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9504 http://www.redhat.com/support/errata/RHSA-2005-685.html http://secunia.com/advisories/15369 http://secunia.com/advisories/17080
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.