Detections
Analytics
MySQL < 3.23.33 Multiple Buffer Overflows
high Nessus Plugin ID 17818
Language:
Synopsis
The remote database server is vulnerable to several buffer overflow attacks.Description
The version of MySQL installed on the remote host is affected by the following vulnerabilities :- A buffer overflow in libmysqlclient.so allows a remote attacker to execute arbitrary code via a long host parameter. (CVE-2001-1453)
- A buffer overflow allows a remote attacker to execute arbitrary code via a long DROP DATABASE. (CVE-2001-1454)
Solution
Upgrade to MySQL version 3.23.33 or later.See Also
Plugin Details
Severity: High
ID: 17818
File Name: mysql_3_23_33.nasl
Version: 1.6
Type: remote
Family: Databases
Published: 1/18/2012
Updated: 7/16/2018
Configuration: Enable paranoid mode
Supported Sensors: Frictionless Assessment Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:mysql:mysql
Required KB Items: Settings/ParanoidReport
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 2/9/2001
Reference Information
CVE: CVE-2001-1453, CVE-2001-1454
BID: 2262