ID de Prueba:	1.3.6.1.4.1.25623.1.0.50715
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2003:057 (MySQL)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to MySQL announced via advisory MDKSA-2003:057. In MySQL 3.23.55 and earlier, MySQL would create world-writeable files and allow mysql users to gain root privileges by using the SELECT * INTO OUTFILE operator to overwrite a configuration file, which could cause mysql to run as root upon restarting the daemon. This has been fixed upstream in version 3.23.56, which is provided for Mandrake Linux 9.0 and Corporate Server 2.1 users. The other updated packages have been patched to correct this issue. Affected versions: 8.2, 9.0, Corporate Server 2.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2003:057 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0150 http://www.mysql.com/doc/en/News-3.23.56.html Risk factor : Critical CVSS Score: 9.0
Referencia Cruzada:	BugTraq ID: 7052 Common Vulnerability Exposure (CVE) ID: CVE-2003-0150 http://www.securityfocus.com/bid/7052 Bugtraq: 20030308 MySQL_user_can_be_changed_to_root? (Google Search) http://marc.info/?l=bugtraq&m=104715840202315&w=2 Bugtraq: 20030310 Re: MySQL user can be changed to root (Google Search) http://marc.info/?l=bugtraq&m=104739810523433&w=2 Bugtraq: 20030318 GLSA: mysql (200303-14) (Google Search) http://marc.info/?l=bugtraq&m=104802285012750&w=2 Bugtraq: 20030318 [OpenPKG-SA-2003.022] OpenPKG Security Advisory (mysql) (Google Search) http://marc.info/?l=bugtraq&m=104800948128630&w=2 CERT/CC vulnerability note: VU#203897 http://www.kb.cert.org/vuls/id/203897 Conectiva Linux advisory: CLA-2003:743 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743 Debian Security Information: DSA-303 (Google Search) http://www.debian.org/security/2003/dsa-303 En Garde Linux Advisory: ESA-20030324-012 http://www.linuxsecurity.com/advisories/engarde_advisory-3046.html http://www.mandriva.com/security/advisories?name=MDKSA-2003:057 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A442 http://www.redhat.com/support/errata/RHSA-2003-093.html RedHat Security Advisories: RHSA-2003:094 http://rhn.redhat.com/errata/RHSA-2003-094.html XForce ISS Database: mysql-datadir-root-privileges(11510) https://exchange.xforce.ibmcloud.com/vulnerabilities/11510
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.