The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0164 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of     the MySQL server daemon (mysqld) and many client programs and libraries.

    The MySQL PolyFromWKB() function did not sanity check Well-Known Binary     (WKB) data, which could allow a remote, authenticated attacker to crash     mysqld. (CVE-2010-3840)

    A flaw in the way MySQL processed certain JOIN queries could allow a     remote, authenticated attacker to cause excessive CPU use (up to 100%), if     a stored procedure contained JOIN queries, and that procedure was executed     twice in sequence. (CVE-2010-3839)

    A flaw in the way MySQL processed queries that provide a mixture of numeric     and longblob data types to the LEAST or GREATEST function, could allow a     remote, authenticated attacker to crash mysqld. (CVE-2010-3838)

    A flaw in the way MySQL processed PREPARE statements containing both     GROUP_CONCAT and the WITH ROLLUP modifier could allow a remote,     authenticated attacker to crash mysqld. (CVE-2010-3837)

    MySQL did not properly pre-evaluate LIKE arguments in view prepare mode,     possibly allowing a remote, authenticated attacker to crash mysqld.
    (CVE-2010-3836)

    A flaw in the way MySQL processed statements that assign a value to a     user-defined variable and that also contain a logical value evaluation     could allow a remote, authenticated attacker to crash mysqld.
    (CVE-2010-3835)

    A flaw in the way MySQL evaluated the arguments of extreme-value functions,     such as LEAST and GREATEST, could allow a remote, authenticated attacker to     crash mysqld. (CVE-2010-3833)

    A flaw in the way MySQL handled LOAD DATA INFILE requests allowed MySQL to     send OK packets even when there were errors. (CVE-2010-3683)

    A flaw in the way MySQL processed EXPLAIN statements for some complex     SELECT queries could allow a remote, authenticated attacker to crash     mysqld. (CVE-2010-3682)

    A flaw in the way MySQL processed certain alternating READ requests     provided by HANDLER statements could allow a remote, authenticated attacker     to crash mysqld. (CVE-2010-3681)

    A flaw in the way MySQL processed CREATE TEMPORARY TABLE statements that     define NULL columns when using the InnoDB storage engine, could allow a     remote, authenticated attacker to crash mysqld. (CVE-2010-3680)

    A flaw in the way MySQL processed certain values provided to the BINLOG     statement caused MySQL to read unassigned memory. A remote, authenticated     attacker could possibly use this flaw to crash mysqld. (CVE-2010-3679)

    A flaw in the way MySQL processed SQL queries containing IN or CASE     statements, when a NULL argument was provided as one of the arguments to     the query, could allow a remote, authenticated attacker to crash mysqld.
    (CVE-2010-3678)

    A flaw in the way MySQL processed JOIN queries that attempt to retrieve     data from a unique SET column could allow a remote, authenticated attacker     to crash mysqld. (CVE-2010-3677)

    Note: CVE-2010-3840, CVE-2010-3838, CVE-2010-3837, CVE-2010-3835,     CVE-2010-3833, CVE-2010-3682, CVE-2010-3681, CVE-2010-3680, CVE-2010-3678,     and CVE-2010-3677 only cause a temporary denial of service, as mysqld was     automatically restarted after each crash.

    These updated packages upgrade MySQL to version 5.1.52. Refer to the MySQL     release notes for a full list of changes:

    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html

    All MySQL users should upgrade to these updated packages, which correct     these issues. After installing this update, the MySQL server daemon     (mysqld) will be restarted automatically.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0164 advisory.

    [5.1.52-1.1]
    - Update to MySQL 5.1.52, for various fixes described at       http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html       including numerous small security issues     Resolves: #652553
    - Sync with current Fedora package; this includes:
    - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,       to ensure they are available when any subset of mysql RPMs are installed,       per revised packaging guidelines
    - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-32:01 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation     consisting of a server daemon (mysqld) and many different client programs and libraries. The base package     contains the MySQL client programs, the client shared libraries, and generic MySQL files.
    Security issues fixed with this release:
    CVE-2010-3677     Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial     of service (mysqld daemon crash) via a join query that uses a table with a unique SET column.
    CVE-2010-3678     Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via     (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by     the WITH ROLLUP modifier.
    CVE-2010-3679     Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld     daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized     memory, as demonstrated by valgrind.
    CVE-2010-3680     Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld     daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an     assertion failure.
    CVE-2010-3681     Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of     service (mysqld daemon crash) by using the HANDLER interface and performing 'alternate reads from two     indexes on a table,' which triggers an assertion failure.
    CVE-2010-3682     Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial     of service (mysqld daemon crash) by using EXPLAIN with crafted 'SELECT ... UNION ... ORDER BY (SELECT ...
    WHERE ...)' statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store     function.
    CVE-2010-3683     Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request     generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon     crash) via a crafted request.
    CVE-2010-3833     MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors,     which allows remote attackers to cause a denial of service (server crash) via crafted arguments to     extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a 'CREATE TABLE     ... SELECT.'     CVE-2010-3835     MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of     service (mysqld server crash) by performing a user-variable assignment in a logical expression that is     calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used     after the table is created, which causes the expression to be re-evaluated instead of accessing its value     from the table.
    CVE-2010-3836     MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to     cause a denial of service (assertion failure and server crash) via vectors related to view preparation,     pre-evaluation of LIKE predicates, and IN Optimizers.
    CVE-2010-3837     MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to     cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH     ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that     also affects the original object.
    CVE-2010-3838     MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to     cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with     a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the function's result     is 'processed using an intermediate temporary table.'     CVE-2010-3839     MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of     service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that     creates a query with nested JOIN statements.
    CVE-2010-3840     The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote     authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with     Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
    These updated packages upgrade MySQL to version 5.1.52. Refer to the MySQL release notes for a full list     of changes:
    <A HREF=http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html>http://dev.mysql...

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
51571	RHEL 6 : mysql (RHSA-2011:0164)	Nessus	Red Hat Local Security Checks	2011/1/19	2025/4/14	medium
68184	Oracle Linux 6 : mysql (ELSA-2011-0164)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	medium
284205	MiracleLinux 4 : mysql-5.1.52-1.AXS4.1 (AXSA:2011-32:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	medium

检测

插件搜索

medium

medium

medium