Red Hat Security AdvisoryRHSA-2010:0110
mysql security update
Released 2010-02-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 mysql-4.1.22-2.el4_8.3, mysql-4.1.22-2.el4_8.3.i386, mysql-4.1.22-2.el4_8.3.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 mysql-4.1.22-2.el4_8.3, mysql-4.1.22-2.el4_8.3.i386, mysql-bench-4.1.22-2.el4_8.3 +5
- Red Hat Enterprise Linux ES version 4 mysql-4.1.22-2.el4_8.3, mysql-4.1.22-2.el4_8.3.i386, mysql-4.1.22-2.el4_8.3.ia64 +9
- Red Hat Enterprise Linux WS version 4 mysql-4.1.22-2.el4_8.3, mysql-4.1.22-2.el4_8.3.i386, mysql-4.1.22-2.el4_8.3.ia64 +9
Fixes 4 records
Priority MEDIUM 50
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and p…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.10586 · Published 2009-07-13 · Fixed CWE-134
Priority LOW 25
MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pa…
CVSS 2.0MEDIUM 4.6· Network · Low privileges · Interaction — · EPSS 0.01624 · Published 2008-09-17 · Fixed CWE-59
Priority LOW 23
Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the --html option is enabled, allows attackers to inject a…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.07049 · Published 2008-10-06 · Fixed CWE-79
Priority LOW 21
MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated w…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00429 · Published 2009-11-30 · Fixed CWE-59
THREATIST.IORead the docs