Red Hat Security AdvisoryRHSA-2010:0824
mysql security update
Released 2010-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 mysql-4.1.22-2.el4_8.4, mysql-4.1.22-2.el4_8.4.i386, mysql-4.1.22-2.el4_8.4.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 mysql-4.1.22-2.el4_8.4, mysql-4.1.22-2.el4_8.4.i386, mysql-bench-4.1.22-2.el4_8.4 +5
- Red Hat Enterprise Linux ES version 4 mysql-4.1.22-2.el4_8.4, mysql-4.1.22-2.el4_8.4.i386, mysql-4.1.22-2.el4_8.4.ia64 +9
- Red Hat Enterprise Linux WS version 4 mysql-4.1.22-2.el4_8.4, mysql-4.1.22-2.el4_8.4.i386, mysql-4.1.22-2.el4_8.4.ia64 +9
Fixes 3 records
Priority LOW 34
Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or d…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.03119 · Published 2010-06-07 · Fixed CWE-22
Priority LOW 33
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.12229 · Published 2011-01-11 · Fixed
Priority LOW 25
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known B…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03391 · Published 2011-01-14 · Fixed
THREATIST.IORead the docs