Red Hat Security AdvisoryRHSA-2010:0109
mysql security update
Released 2010-02-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) mysql-5.0.77-4.el5_4.2, mysql-5.0.77-4.el5_4.2.i386, mysql-5.0.77-4.el5_4.2.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) mysql-5.0.77-4.el5_4.2, mysql-5.0.77-4.el5_4.2.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mysql-5.0.77-4.el5_4.2, mysql-bench-5.0.77-4.el5_4.2, mysql-bench-5.0.77-4.el5_4.2.i386 +6
Fixes 3 records
Priority LOW 35
mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during exe…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.16263 · Published 2009-11-30 · Fixed
Priority LOW 34
The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middl…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01766 · Published 2009-11-30 · Fixed CWE-20
Priority LOW 21
MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated w…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00429 · Published 2009-11-30 · Fixed CWE-59