この更新は、mysql のいくつかのセキュリティ問題を修正します：

- サーバー証明書のチェック（CVE-2009-4028）

- サブクエリでのエラー処理（CVE-2009-4019）

- GeomFromWKB での null_value フラグの保持（CVE-2009-4019）

- シンボリックリンクの動作を修正（CVE-2008-7247）

- シンボリックリンクの動作を再修正（CVE-2009-4030）

最新の MySQL パッケージは、以下のバグを修正します：

- upstream #47320 - サーバー証明書のチェック
 （CVE-2009-4028）

- upstream #48291 - サブクエリでのエラー処理
 （CVE-2009-4019）

- upstream #47780 - GeomFromWKB() での null_value フラグの保存（CVE-2009-4019）

- upstream #39277 - シンボリックリンク動作の修正
 （CVE-2008-7247）

- Upstream #32167 - シンボリックリンク動作の再修正（CVE-2009-4030）

リモートホストは、GLSA-201201-02 で説明されている脆弱性の影響を受けます（MySQL：複数の脆弱性）

MySQL に複数の脆弱性が発見されました。詳細については、以下で参照されている CVE 識別子をレビューしてください。
 影響：

認証されないリモートの攻撃者が、MySQL プロセスの権限で、任意のコードを実行でき、サービス拒否状態を引き起こしたり、セキュリティ制限をバイパスしたり、任意の MySQL プラグインをアンインストールしたり、中間者およびクロスサイトスクリプティング攻撃を実行したりする可能性があります。
 回避策：

現時点で、既知の回避策はありません。

- Update to MySQL 5.1.41, for various fixes described at     http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html     including security fixes - Stop waiting during 'service     mysqld start' if mysqld_safe exits

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated mysql packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

It was discovered that the MySQL client ignored certain SSL certificate verification errors when connecting to servers. A man-in-the-middle attacker could use this flaw to trick MySQL clients into connecting to a spoofed MySQL server. (CVE-2009-4028)

Note: This fix may uncover previously hidden SSL configuration issues, such as incorrect CA certificates being used by clients or expired server certificates. This update should be carefully tested in deployments where SSL connections are used.

A flaw was found in the way MySQL handled SELECT statements with subqueries in the WHERE clause, that assigned results to a user variable. A remote, authenticated attacker could use this flaw to crash the MySQL server daemon (mysqld). This issue only caused a temporary denial of service, as the MySQL daemon was automatically restarted after the crash. (CVE-2009-4019)

When the 'datadir' option was configured with a relative path, MySQL did not properly check paths used as arguments for the DATA DIRECTORY and INDEX DIRECTORY directives. An authenticated attacker could use this flaw to bypass the restriction preventing the use of subdirectories of the MySQL data directory being used as DATA DIRECTORY and INDEX DIRECTORY paths. (CVE-2009-4030)

Note: Due to the security risks and previous security issues related to the use of the DATA DIRECTORY and INDEX DIRECTORY directives, users not depending on this feature should consider disabling it by adding 'symbolic-links=0' to the '[mysqld]' section of the 'my.cnf' configuration file. In this update, an example of such a configuration was added to the default 'my.cnf' file.

All MySQL users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues. After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.

Multiple vulnerabilities has been found and corrected in mysql :

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement (CVE-2009-4019).

The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library (CVE-2009-4028).

MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079 (CVE-2009-4030).

The updated packages have been patched to correct these issues.
Additionally for 2009.1 and 2010.0 mysql has also been upgraded to the latest stable 5.1 release (5.1.42).

Several vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-4019     Domas Mituzas discovered that mysqld does not properly     handle errors during execution of certain SELECT     statements with subqueries, and does not preserve     certain null_value flags during execution of statements     that use the GeomFromWKB function, which allows remote     authenticated users to cause a denial of service (daemon     crash) via a crafted statement.

  - CVE-2009-4030     Sergei Golubchik discovered that MySQL allows local     users to bypass certain privilege checks by calling     CREATE TABLE on a MyISAM table with modified DATA     DIRECTORY or INDEX DIRECTORY arguments that are     originally associated with pathnames without symlinks,     and that can point to tables created at a future time at     which a pathname is modified to contain a symlink to a     subdirectory of the MySQL data home directory.

  - CVE-2009-4484     Multiple stack-based buffer overflows in the     CertDecoder::GetName function in src/asn.cpp in TaoCrypt     in yaSSL before 1.9.9, as used in mysqld, allow remote     attackers to execute arbitrary code or cause a denial of     service (memory corruption and daemon crash) by     establishing an SSL connection and sending an X.509     client certificate with a crafted name field.

This update fixes several security issues in mysql :

  - checking server certificates (CVE-2009-4028)

  - error handling in subqueries (CVE-2009-4019)

  - preserving null_value flag in GeomFromWKB     (CVE-2009-4019)

  - symlink behavior fixed (CVE-2008-7247)

  - symlink behavior refixed (CVE-2009-4030)

Updated MySQL packages fix the following bugs :

  - upstream #47320 - checking server certificates.
    (CVE-2009-4028)

  - upstream #48291 - error handling in subqueries.
    (CVE-2009-4019)

  - upstream #47780 - preserving null_value flag in     GeomFromWKB(). (CVE-2009-4019)

  - upstream #39277 - symlink behaviour fixed.
    (CVE-2008-7247)

  - upstream #32167 - symlink behaviour refixed     (CVE-2009-4030)

The remote host is affected by the vulnerability described in GLSA-201201-02 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the CVE identifiers referenced below for details.
  Impact :

    An unauthenticated remote attacker may be able to execute arbitrary code       with the privileges of the MySQL process, cause a Denial of Service       condition, bypass security restrictions, uninstall arbitrary MySQL       plugins, or conduct Man-in-the-Middle and Cross-Site Scripting attacks.
  Workaround :

    There is no known workaround at this time.

The remote host is running MySQL Community server < 5.1.41.  Such versions are potentially affected by multiple issues : 

  - The application fails to correctly handle the data directory path name if it contains symlinked directories in its path which could lead to a local privilege escalation. (Bug 32167)

  - MySQL clients linked against OpenSSL did not check server certificates presented by a server linked against yaSSL. (Bug 47320)

  - An error related to the handling of certain SELECT statements containing subqueries.

  - A failure to preserve unspecified 'null_value' flags when executing statements that use the 'GeomFromWKB' function.

The remote host is running MySQL Community server < 5.0.88.  Such versions are potentially affected by multiple issues : 

  - MySQL clients linked against OpenSSL are vulnerable to man-in-the-middle attacks. (Bug #47320)

  - The GeomFromWKB() function can be manipulated to cause a denial of service. (Bug #47780)

  - Specially crafted SELECT statements containing sub-queries in the WHERE clause can cause the server to crash. (Bug 48291)

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.3.  Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server

  - Apache

  - CoreAudio

  - CoreMedia

  - CoreTypes

  - CUPS

  - DesktopServices

  - Disk Images

  - Directory Services

  - Dovecot

  - Event Monitor

  - FreeRADIUS

  - FTP Server

  - iChat Server

  - ImageIO

  - Image RAW

  - Libsystem

  - Mail

  - MySQL

  - OS Services

  - Password Server

  - PHP

  - Podcast Producer

  - Preferences

  - PS Normalizer

  - QuickTime

  - Ruby

  - Server Admin

  - SMB

  - Tomcat

  - Wiki Server

  - X11

The remote host is running MySQL Community server &lt; 5.1.41.  Such versions are potentially affected by multiple issues : 

  - The application fails to correctly handle the data directory path name if it contains symlinked directories in its path which could lead to a local privilege escalation. (Bug 32167)

  - MySQL clients linked against OpenSSL did not check server certificates presented by a server linked against yaSSL. (Bug 47320)

  - An error related to the handling of certain SELECT statements containing subqueries.

  - A failure to preserve unspecified 'null_value' flags when executing statements that use the 'GeomFromWKB' function.

The remote host is running MySQL Community server &lt; 5.0.88.  Such versions are potentially affected by multiple issues : 

  - MySQL clients linked against OpenSSL are vulnerable to man-in-the-middle attacks. (Bug #47320)

  - The GeomFromWKB() function can be manipulated to cause a denial of service. (Bug #47780)

  - Specially crafted SELECT statements containing sub-queries in the WHERE clause can cause the server to crash. (Bug 48291)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
46218	openSUSE セキュリティ更新：libmysqlclient-devel（openSUSE-SU-2010:0198-1）	Nessus	SuSE Local Security Checks	2010/5/4	2021/1/14	medium
50935	SuSE 11 セキュリティ更新：MySQL（SAT パッチ番号 2317）	Nessus	SuSE Local Security Checks	2010/12/2	2021/1/14	medium
57446	GLSA-201201-02：MySQL：複数の脆弱性	Nessus	Gentoo Local Security Checks	2012/1/6	2021/1/6	high
43374	Fedora 12 : mysql-5.1.41-2.fc12 (2009-13466)	Nessus	Fedora Local Security Checks	2009/12/22	2021/1/11	medium
44948	CentOS 5 : mysql (CESA-2010:0109)	Nessus	CentOS Local Security Checks	2010/3/2	2021/1/4	medium
48166	Mandriva Linux Security Advisory : mysql (MDVSA-2010:012)	Nessus	Mandriva Local Security Checks	2010/7/30	2021/1/6	medium
44861	Debian DSA-1997-1 : mysql-dfsg-5.0 - several vulnerabilities	Nessus	Debian Local Security Checks	2010/2/24	2021/1/4	high
46218	openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2010:0198-1)	Nessus	SuSE Local Security Checks	2010/5/4	2021/1/14	medium
50935	SuSE 11 Security Update : MySQL (SAT Patch Number 2317)	Nessus	SuSE Local Security Checks	2010/12/2	2021/1/14	medium
57446	GLSA-201201-02 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/1/6	2021/1/6	high
5240	Oracle MySQL < 5.1.41 Multiple Vulnerabilities	Nessus Network Monitor	Database	2009/11/24	2019/3/6	high
5259	Oracle MySQL < 5.0.88 Multiple Vulnerabilities	Nessus Network Monitor	Database	2009/12/14	2019/3/6	high
5489	Mac OS X < 10.6.3 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2010/3/30	2019/3/6	critical
801137	MySQL < 5.1.41 Multiple Vulnerabilities	Log Correlation Engine	Database	2009/11/24		medium
801144	MySQL < 5.0.88 Multiple Vulnerabilities	Log Correlation Engine	Database	2009/12/14		medium

检测

插件搜索

medium

medium

high

medium

medium

medium

high

medium

medium

high

high

high

critical

medium

medium