- the COM_CREATE_DB and COM_DROP_DB suffered from format     string vulnerabilities (CVE-2009-2446)

  - the command line client was prone to cross-site     scripting (XSS) attacks (CVE-2008-4456)

  - fix slave reconnect

- the COM_CREATE_DB and COM_DROP_DB suffered from format     string vulnerabilities. (CVE-2009-2446)

  - the command line client was prone to cross-site     scripting (XSS) attacks. (CVE-2008-4456)

Additionally a problem that sometimes prevented slave hosts from reconnecting to the master server has been fixed.

Multiple vulnerabilities have been identified affecting MySQL, a relational database server, and its associated interactive client application. The Common Vulnerabilities and Exposures project identifies the following two problems :

  - CVE-2008-3963     Kay Roepke reported that the MySQL server would not     properly handle an empty bit-string literal in a SQL     statement, allowing an authenticated remote attacker to     cause a denial of service (a crash) in mysqld. This     issue affects the oldstable distribution (etch), but not     the stable distribution (lenny).

  - CVE-2008-4456     Thomas Henlich reported that the MySQL commandline     client application did not encode HTML special     characters when run in HTML output mode (that is, 'mysql
    --html ...'). This could potentially lead to cross-site     scripting or unintended script privilege escalation if     the resulting output is viewed in a browser or     incorporated into a website.

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.3.  Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server

  - Apache

  - CoreAudio

  - CoreMedia

  - CoreTypes

  - CUPS

  - DesktopServices

  - Disk Images

  - Directory Services

  - Dovecot

  - Event Monitor

  - FreeRADIUS

  - FTP Server

  - iChat Server

  - ImageIO

  - Image RAW

  - Libsystem

  - Mail

  - MySQL

  - OS Services

  - Password Server

  - PHP

  - Podcast Producer

  - Preferences

  - PS Normalizer

  - QuickTime

  - Ruby

  - Server Admin

  - SMB

  - Tomcat

  - Wiki Server

  - X11

ID	名稱	產品	系列	已發布	已更新	嚴重性
40790	openSUSE Security Update : libmysqlclient-devel (libmysqlclient-devel-1116)	Nessus	SuSE Local Security Checks	2009/8/27	2021/1/14	high
41560	SuSE 10 Security Update : MySQL (ZYPP Patch Number 6446)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	high
38642	Debian DSA-1783-1 : mysql-dfsg-5.0 - multiple vulnerabilities	Nessus	Debian Local Security Checks	2009/4/30	2021/1/4	medium
5489	Mac OS X < 10.6.3 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2010/3/30	2019/3/6	critical

偵測

搜尋 Plugin

high

high

medium

critical