You are running a version of MySQL which is older than version 4.0.21.
Such versions are potentially affected by two flaws :

  - There is an unauthorized database GRANT privilege     vulnerability, which may allow an attacker to misuse the     GRANT privilege it has been given and to use it against     other databases. (CVE-2004-0957)

  - A denial of service vulnerability may be triggered by     the misuse of the FULLTEXT search functionality.
    (CVE-2004-0956)

Several vulnerabilities have been discovered in the MySQL database server.

Lukasz Wojtow discovered a potential buffer overflow in the function mysql_real_connect(). A malicious name server could send specially crafted DNS packages which might result in execution of arbitrary code with the database server's privileges. However, it is believed that this bug cannot be exploited with the C Standard library (glibc) that Ubuntu uses. (CAN-2004-0836).

Dean Ellis noticed a flaw that allows an authorized MySQL user to cause a denial of service (crash or hang) via concurrent execution of certain statements (ALTER TABLE ... UNION=, FLUSH TABLES) on tables of type MERGE (CAN-2004-0837)

Some query strings containing a double quote (like MATCH ... AGAINST (' some ' query' IN BOOLEAN MODE) ) that did not have a matching closing double quote caused a denial of service (server crash). Again, this is only exploitable by authorized mysql users. (CAN-2004-0956)

If a user was granted privileges to a database with a name containing an underscore ('_'), the user also gained the ability to grant privileges to other databases with similar names. (CAN-2004-0957).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A special crafted MySQL FTS request can cause the server to crash.
Malicious MySQL users can abuse this bug in a denial of service attack against systems running an affected MySQL daemon.

Note that because this bug is related to the parsing of requests, it may happen that this bug is triggered accidentally by a user when he or she makes a typo.

4.0.21 より古いバージョンの MySQL を実行しています。
このようなバージョンは、以下の 2 つの欠陥の影響を受ける可能性があります。

  - 許可されていないデータベース GRANT 権限の脆弱性があり、これによって攻撃者は、与えられている GRANT 権限を悪用して、他のデータベースに対してそれを使用できることがあります。（CVE-2004-0957）

  - サービス拒否の脆弱性は、FULLTEXT 検索機能の悪用によってトリガされることがあります。
    （CVE-2004-0956）

您目前執行的 MySQL 版本比 4.0.21 舊。
這些版本可能受到兩個瑕疵的影響：

  - 一個是未經授權的資料庫 GRANT 權限弱點，可讓攻擊者濫用取得的 GRANT 權限，並用來對其他資料庫發動攻擊。(CVE-2004-0957)

  - 另一個是可以藉由濫用 FULLTEXT 搜尋功能觸發的拒絕服務弱點。
    (CVE-2004-0956)

您正在运行的 MySQL 版本低于 4.0.21。
此类版本可能会受到两个缺陷的影响：

  - 存在未经授权的数据库 GRANT 特权漏洞，攻击者可利用此漏洞，滥用其获得的 GRANT 特权，并对其他数据库使用此特权。(CVE-2004-0957)

  - 存在拒绝服务漏洞，滥用 FULLTEXT 搜索功能可触发此漏洞。
    (CVE-2004-0956)

The remote host is running a version of MySQL that is older than version 4.0.21.
It is vulnerable to a flaw that may allow an attacker to cause a Denial Of Service. An attacker can exploit this vulnerability by using the FULLTEXT search functionality. 

ID	名稱	產品	系列	已發布	已更新	嚴重性
15477	MySQL < 4.0.21 Multiple Vulnerabilities	Nessus	Databases	2004/10/17	2018/11/15	medium
20648	Ubuntu 4.10 : mysql-dfsg vulnerabilities (USN-32-1)	Nessus	Ubuntu Local Security Checks	2006/1/15	2021/1/19	critical
18882	FreeBSD : mysql -- FTS request denial of service vulnerability (29edd807-438d-11d9-8bb9-00065be4b5b6)	Nessus	FreeBSD Local Security Checks	2005/7/13	2021/1/6	medium
15477	MySQL < 4.0.21 の複数の脆弱性	Nessus	Databases	2004/10/17	2018/11/15	medium
15477	MySQL < 4.0.21 多種弱點	Nessus	Databases	2004/10/17	2018/11/15	medium
15477	MySQL < 4.0.21 多种漏洞	Nessus	Databases	2004/10/17	2018/11/15	medium
2369	Oracle MySQL < 4.0.21 Remote FULLTEXT Search DoS	Nessus Network Monitor	Database	2004/10/28	2019/3/6	medium
801166	MySQL < 4.0.21 Remote FULLTEXT Search DoS	Log Correlation Engine	Database			medium

偵測

搜尋 Plugin

medium

critical

medium

medium

medium

medium

medium

medium