Multiple vulnerabilities were discovered and corrected in mysql :

  - Joins involving a table with with a unique SET column     could cause a server crash (CVE-2010-3677).

  - Use of TEMPORARY InnoDB tables with nullable columns     could cause a server crash (CVE-2010-3680).

  - The server could crash if there were alternate reads     from two indexes on a table using the HANDLER interface     (CVE-2010-3681).

  - Using EXPLAIN with queries of the form SELECT ... UNION     ... ORDER BY (SELECT ... WHERE ...) could cause a server     crash (CVE-2010-3682).

  - During evaluation of arguments to extreme-value     functions (such as LEAST() and GREATEST()), type errors     did not propagate properly, causing the server to crash     (CVE-2010-3833).

  - The server could crash after materializing a derived     table that required a temporary table for grouping     (CVE-2010-3834).

  - A user-variable assignment expression that is evaluated     in a logical expression context can be precalculated in     a temporary table for GROUP BY. However, when the     expression value is used after creation of the temporary     table, it was re-evaluated, not read from the table and     a server crash resulted (CVE-2010-3835).

  - Pre-evaluation of LIKE predicates during view     preparation could cause a server crash (CVE-2010-3836).

  - GROUP_CONCAT() and WITH ROLLUP together could cause a     server crash (CVE-2010-3837).

  - Queries could cause a server crash if the GREATEST() or     LEAST() function had a mixed list of numeric and     LONGBLOB arguments, and the result of such a function     was processed using an intermediate temporary table     (CVE-2010-3838).

  - Queries with nested joins could cause an infinite loop     in the server when used from stored procedures and     prepared statements (CVE-2010-3839).

  - The PolyFromWKB() function could crash the server when     improper WKB data was passed to the function     (CVE-2010-3840).

Additionally the default behaviour of using the mysqlmanager instead of the mysqld_safe script has been reverted in the SysV init script because of instability issues with the mysqlmanager.

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&amp;products_id=4 90

The updated packages have been upgraded to mysql 5.0.91 and patched to correct these issues.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0825 advisory.

    - Add fixes for CVE-2010-3677, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682,       CVE-2010-3833, CVE-2010-3835, CVE-2010-3836, CVE-2010-3837, CVE-2010-3838,       CVE-2010-3839, CVE-2010-3840     Resolves: #645642

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0164 advisory.

    [5.1.52-1.1]
    - Update to MySQL 5.1.52, for various fixes described at       http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html       including numerous small security issues     Resolves: #652553
    - Sync with current Fedora package; this includes:
    - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,       to ensure they are available when any subset of mysql RPMs are installed,       per revised packaging guidelines
    - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

MariaDB was updated to version 5.1.55 to fix numerous bugs and security issues.

This update fixes the following security issue :

  - 676974: mysql-cluster: security issues fixed in MySQL     5.1.51

This update fixes the following security issue :

  - 676974: mysql-cluster: security issues fixed in MySQL     5.1.51

This update also fixes the following non-security issue :

  - 635645: mysql init script fails to start when SELinux is     enabled

Multiple vulnerabilities were discovered and corrected in mysql :

  - During evaluation of arguments to extreme-value     functions (such as LEAST() and GREATEST()), type errors     did not propagate properly, causing the server to crash     (CVE-2010-3833).

  - The server could crash after materializing a derived     table that required a temporary table for grouping     (CVE-2010-3834).

  - A user-variable assignment expression that is evaluated     in a logical expression context can be precalculated in     a temporary table for GROUP BY. However, when the     expression value is used after creation of the temporary     table, it was re-evaluated, not read from the table and     a server crash resulted (CVE-2010-3835).

  - Pre-evaluation of LIKE predicates during view     preparation could cause a server crash (CVE-2010-3836).

  - GROUP_CONCAT() and WITH ROLLUP together could cause a     server crash (CVE-2010-3837).

  - Queries could cause a server crash if the GREATEST() or     LEAST() function had a mixed list of numeric and     LONGBLOB arguments, and the result of such a function     was processed using an intermediate temporary table     (CVE-2010-3838).

  - Queries with nested joins could cause an infinite loop     in the server when used from stored procedures and     prepared statements (CVE-2010-3839).

  - The PolyFromWKB() function could crash the server when     improper WKB data was passed to the function     (CVE-2010-3840).

The updated packages have been patched to correct these issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
50533	Mandriva Linux Security Advisory : mysql (MDVSA-2010:222)	Nessus	Mandriva Local Security Checks	2010/11/10	2021/1/6	medium
68134	Oracle Linux 5 : mysql (ELSA-2010-0825)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/23	medium
68184	Oracle Linux 6 : mysql (ELSA-2011-0164)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	medium
75582	openSUSE Security Update : libmariadbclient16 (openSUSE-SU-2011:0743-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
75898	openSUSE Security Update : libmariadbclient16 (openSUSE-SU-2011:0743-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
75905	openSUSE Security Update : libmysqlclusterclient16 (openSUSE-SU-2011:0799-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
75590	openSUSE Security Update : libmysqlclusterclient16 (openSUSE-SU-2011:0774-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
50534	Mandriva Linux Security Advisory : mysql (MDVSA-2010:223)	Nessus	Mandriva Local Security Checks	2010/11/10	2021/1/6	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium