Red Hat Security AdvisoryRHSA-2010:0442
mysql security update
Released 2010-05-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) mysql-5.0.77-4.el5_5.3, mysql-5.0.77-4.el5_5.3.i386, mysql-5.0.77-4.el5_5.3.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) mysql-5.0.77-4.el5_5.3, mysql-5.0.77-4.el5_5.3.i386, mysql-bench-5.0.77-4.el5_5.3.i386 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mysql-5.0.77-4.el5_5.3, mysql-bench-5.0.77-4.el5_5.3, mysql-bench-5.0.77-4.el5_5.3.i386 +6
Fixes 3 records
Priority MEDIUM 46
Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.21789 · Published 2010-06-07 · Fixed CWE-119
Priority LOW 34
Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or d…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.03119 · Published 2010-06-07 · Fixed CWE-22
Priority LOW 18
MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and C…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.0049 · Published 2010-05-21 · Partial fix CWE-264
THREATIST.IORead the docs