ID de Prueba:	1.3.6.1.4.1.25623.1.0.122583
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2008-0364)
Resumen:	The remote host is missing an update for the 'mysql' package(s) announced via the ELSA-2008-0364 advisory.
Descripción:	Summary: The remote host is missing an update for the 'mysql' package(s) announced via the ELSA-2008-0364 advisory. Vulnerability Insight: [5.0.45-7] - Adjust thread stack requests to allow for platform-specific guard page size, necessary to prevent stack overrun on PPC with RHEL5's 64K page size. Resolves: #435391 - Remove calendar-dependent queries from 'view' test, necessary to get regression tests to pass after 2007. [5.0.45-6] - Back-port upstream fixes for CVE-2007-5925, CVE-2007-5969, CVE-2007-6303. Resolves: #422211 [5.0.45-1] - Update to MySQL 5.0.45 Resolves: #256501, #240813, #246309, #254012 Resolves: #280811, #316451, #349121, #367131 - Synchronize with current Fedora package, which is pretty well tested by now, see past bzs 245770, 241912, 233771, 221085, 223713, 203910, 193559, 199368 [5.0.22-3] - Fix CVE-2007-3780: remote DOS via bad password length byte Resolves: #257681 Affected Software/OS: 'mysql' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-0903 1015693 http://securitytracker.com/id?1015693 16850 http://www.securityfocus.com/bid/16850 19034 http://secunia.com/advisories/19034 19502 http://secunia.com/advisories/19502 19814 http://secunia.com/advisories/19814 20060225 mysql <= 5.0.18 http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0653.html 20241 http://secunia.com/advisories/20241 20253 http://secunia.com/advisories/20253 20333 http://secunia.com/advisories/20333 20625 http://secunia.com/advisories/20625 30351 http://secunia.com/advisories/30351 ADV-2006-0752 http://www.vupen.com/english/advisories/2006/0752 DSA-1071 http://www.debian.org/security/2006/dsa-1071 DSA-1073 http://www.debian.org/security/2006/dsa-1073 DSA-1079 http://www.debian.org/security/2006/dsa-1079 MDKSA-2006:064 http://www.mandriva.com/security/advisories?name=MDKSA-2006:064 RHSA-2006:0544 http://www.redhat.com/support/errata/RHSA-2006-0544.html RHSA-2007:0083 http://www.redhat.com/support/errata/RHSA-2007-0083.html RHSA-2008:0364 http://www.redhat.com/support/errata/RHSA-2008-0364.html USN-274-1 https://usn.ubuntu.com/274-1/ USN-274-2 http://www.ubuntu.com/usn/usn-274-2 http://bugs.mysql.com/bug.php?id=17667 http://rst.void.ru/papers/advisory39.txt mysql-query-log-bypass-security(24966) https://exchange.xforce.ibmcloud.com/vulnerabilities/24966 oval:org.mitre.oval:def:9915 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9915 Common Vulnerability Exposure (CVE) ID: CVE-2006-4031 http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html BugTraq ID: 19279 http://www.securityfocus.com/bid/19279 Cert/CC Advisory: TA07-072A http://www.us-cert.gov/cas/techalerts/TA07-072A.html http://www.mandriva.com/security/advisories?name=MDKSA-2006:149 http://bugs.mysql.com/bug.php?id=15195 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10468 http://www.redhat.com/support/errata/RHSA-2008-0768.html http://securitytracker.com/id?1016617 http://secunia.com/advisories/21259 http://secunia.com/advisories/21382 http://secunia.com/advisories/21627 http://secunia.com/advisories/21685 http://secunia.com/advisories/21770 http://secunia.com/advisories/22080 http://secunia.com/advisories/24479 http://secunia.com/advisories/31226 SuSE Security Announcement: SUSE-SR:2006:023 (Google Search) http://www.novell.com/linux/security/advisories/2006_23_sr.html http://www.ubuntu.com/usn/usn-338-1 http://www.vupen.com/english/advisories/2006/3079 http://www.vupen.com/english/advisories/2007/0930 Common Vulnerability Exposure (CVE) ID: CVE-2006-4227 BugTraq ID: 19559 http://www.securityfocus.com/bid/19559 http://lists.mysql.com/commits/7918 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105 http://securitytracker.com/id?1016709 http://secunia.com/advisories/21506 http://www.vupen.com/english/advisories/2006/3306 XForce ISS Database: mysql-grant-execute-privilege-escalation(28442) https://exchange.xforce.ibmcloud.com/vulnerabilities/28442 Common Vulnerability Exposure (CVE) ID: CVE-2006-7232 BugTraq ID: 28351 http://www.securityfocus.com/bid/28351 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11720 http://secunia.com/advisories/29443 http://secunia.com/advisories/31687 SuSE Security Announcement: SUSE-SR:2008:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://www.ubuntu.com/usn/usn-588-1 Common Vulnerability Exposure (CVE) ID: CVE-2007-1420 BugTraq ID: 22900 http://www.securityfocus.com/bid/22900 Bugtraq: 20070309 SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service (Google Search) http://www.securityfocus.com/archive/1/462339/100/0/threaded http://security.gentoo.org/glsa/glsa-200705-11.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:139 http://www.sec-consult.com/284.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9530 http://www.securitytracker.com/id?1017746 http://secunia.com/advisories/24483 http://secunia.com/advisories/24609 http://secunia.com/advisories/25196 http://secunia.com/advisories/25389 http://secunia.com/advisories/25946 http://securityreason.com/securityalert/2413 http://www.ubuntu.com/usn/usn-440-1 http://www.vupen.com/english/advisories/2007/0908 Common Vulnerability Exposure (CVE) ID: CVE-2007-2583 BugTraq ID: 23911 http://www.securityfocus.com/bid/23911 Debian Security Information: DSA-1413 (Google Search) http://www.debian.org/security/2007/dsa-1413 http://www.exploit-db.com/exploits/30020 http://packetstormsecurity.com/files/124295/MySQL-5.0.x-Denial-Of-Service.html http://www.osvdb.org/34734 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9930 http://secunia.com/advisories/25188 http://secunia.com/advisories/25255 http://secunia.com/advisories/27155 http://secunia.com/advisories/27823 http://secunia.com/advisories/28838 SuSE Security Announcement: SUSE-SR:2008:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html http://www.trustix.org/errata/2007/0017/ https://usn.ubuntu.com/528-1/ http://www.vupen.com/english/advisories/2007/1731 XForce ISS Database: mysql-if-dos(34232) https://exchange.xforce.ibmcloud.com/vulnerabilities/34232 Common Vulnerability Exposure (CVE) ID: CVE-2007-2691 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html BugTraq ID: 24016 http://www.securityfocus.com/bid/24016 BugTraq ID: 31681 http://www.securityfocus.com/bid/31681 Bugtraq: 20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server (Google Search) http://www.securityfocus.com/archive/1/473874/100/0/threaded http://bugs.mysql.com/bug.php?id=27515 http://lists.mysql.com/announce/470 http://osvdb.org/34766 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9559 http://www.redhat.com/support/errata/RHSA-2007-0894.html http://www.securitytracker.com/id?1018069 http://secunia.com/advisories/25301 http://secunia.com/advisories/26073 http://secunia.com/advisories/26430 http://secunia.com/advisories/32222 http://www.vupen.com/english/advisories/2007/1804 http://www.vupen.com/english/advisories/2008/2780 XForce ISS Database: mysql-renametable-weak-security(34347) https://exchange.xforce.ibmcloud.com/vulnerabilities/34347 Common Vulnerability Exposure (CVE) ID: CVE-2007-2692 BugTraq ID: 24011 http://www.securityfocus.com/bid/24011 http://www.mandriva.com/security/advisories?name=MDVSA-2008:028 http://bugs.mysql.com/bug.php?id=27337 http://osvdb.org/34765 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9166 http://www.securitytracker.com/id?1018070 http://secunia.com/advisories/28637 XForce ISS Database: mysql-changedb-privilege-escalation(34348) https://exchange.xforce.ibmcloud.com/vulnerabilities/34348 Common Vulnerability Exposure (CVE) ID: CVE-2007-3781 BugTraq ID: 25017 http://www.securityfocus.com/bid/25017 Debian Security Information: DSA-1451 (Google Search) http://www.debian.org/security/2008/dsa-1451 http://security.gentoo.org/glsa/glsa-200708-10.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:243 http://bugs.mysql.com/bug.php?id=25578 http://osvdb.org/37783 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9195 http://secunia.com/advisories/26498 http://secunia.com/advisories/26987 http://secunia.com/advisories/28040 http://secunia.com/advisories/28108 http://secunia.com/advisories/28128 http://secunia.com/advisories/28343 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959 https://usn.ubuntu.com/559-1/ Common Vulnerability Exposure (CVE) ID: CVE-2007-3782 http://www.mandriva.com/security/advisories?name=MDKSA-2007:177 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563 http://securitytracker.com/id?1018663 http://secunia.com/advisories/26710 SuSE Security Announcement: SUSE-SR:2007:019 (Google Search) http://www.novell.com/linux/security/advisories/2007_19_sr.html
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.