DSA-483

Executive Summary

Summary
Title	New mysql packages fix insecure temporary file creation

Informations
Name	DSA-483	First vendor Publication	2004-04-14
Vendor	Debian	Last vendor Modification	2004-04-14
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:N)
Cvss Base Score	2.1	Attack Range	Local
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Two vulnerabilities have been discovered in mysql, a common database system. Two scripts contained in the package don't create temporary files in a secure fashion. This could allow a local attacker to overwrite files with the privileges of the user invoking the MySQL server, which is often the root user. The Common Vulnerabilities and Exposures identifies the following problems:

CAN-2004-0381

The script mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack.

CAN-2004-0388

The script mysqld_multi in MySQL allows local users to overwrite arbitrary files via a symlink attack.

For the stable distribution (woody) these problems have been fixed in version 3.23.49-8.6.

For the unstable distribution (sid) these problems will be fixed in version 4.0.18-6 of mysql-dfsg.

We recommend that you upgrade your mysql, mysql-dfsg and related packages.

Original Source

Url : http://www.debian.org/security/2004/dsa-483

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11557

Oval ID:	oval:org.mitre.oval:def:11557
Title:	mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Description:	mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-0381	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section mysql is earlier than 0:3.23.58-2.3 AND mysql-devel is earlier than 0:3.23.58-2.3 AND mysql-bench is earlier than 0:3.23.58-2.3

Definition Id: oval:org.mitre.oval:def:10559

Oval ID:	oval:org.mitre.oval:def:10559
Title:	The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.
Description:	The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-0388	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section mysql is earlier than 0:3.23.58-2.3 AND mysql-devel is earlier than 0:3.23.58-2.3 AND mysql-bench is earlier than 0:3.23.58-2.3

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mysql Mysql cpe:/a:mysql:mysql:5.0.33 cpe:/a:mysql:mysql:4.1.0.0 cpe:/a:mysql:mysql:4.1.0:alpha cpe:/a:mysql:mysql:4.0.9:gamma cpe:/a:mysql:mysql:4.0.9 cpe:/a:mysql:mysql:4.0.8:gamma cpe:/a:mysql:mysql:4.0.8 cpe:/a:mysql:mysql:4.0.7:gamma cpe:/a:mysql:mysql:4.0.7 cpe:/a:mysql:mysql:4.0.6 cpe:/a:mysql:mysql:4.0.5a cpe:/a:mysql:mysql:4.0.5 cpe:/a:mysql:mysql:4.0.4 cpe:/a:mysql:mysql:4.0.3 cpe:/a:mysql:mysql:4.0.2 cpe:/a:mysql:mysql:4.0.18 cpe:/a:mysql:mysql:4.0.15 cpe:/a:mysql:mysql:4.0.14 cpe:/a:mysql:mysql:4.0.13 cpe:/a:mysql:mysql:4.0.12 cpe:/a:mysql:mysql:4.0.11 cpe:/a:mysql:mysql:4.0.11:gamma cpe:/a:mysql:mysql:4.0.10 cpe:/a:mysql:mysql:4.0.1 cpe:/a:mysql:mysql:4.0.0 cpe:/a:mysql:mysql:3.23.9 cpe:/a:mysql:mysql:3.23.8 cpe:/a:mysql:mysql:3.23.58 cpe:/a:mysql:mysql:3.23.56 cpe:/a:mysql:mysql:3.23.55 cpe:/a:mysql:mysql:3.23.54a cpe:/a:mysql:mysql:3.23.54 cpe:/a:mysql:mysql:3.23.53a cpe:/a:mysql:mysql:3.23.53 cpe:/a:mysql:mysql:3.23.52 cpe:/a:mysql:mysql:3.23.51 cpe:/a:mysql:mysql:3.23.50 cpe:/a:mysql:mysql:3.23.5 cpe:/a:mysql:mysql:3.23.49 cpe:/a:mysql:mysql:3.23.48 cpe:/a:mysql:mysql:3.23.47 cpe:/a:mysql:mysql:3.23.46 cpe:/a:mysql:mysql:3.23.45 cpe:/a:mysql:mysql:3.23.44 cpe:/a:mysql:mysql:3.23.43 cpe:/a:mysql:mysql:3.23.42 cpe:/a:mysql:mysql:3.23.41 cpe:/a:mysql:mysql:3.23.40 cpe:/a:mysql:mysql:3.23.39 cpe:/a:mysql:mysql:3.23.38 cpe:/a:mysql:mysql:3.23.37 cpe:/a:mysql:mysql:3.23.36 cpe:/a:mysql:mysql:3.23.34 cpe:/a:mysql:mysql:3.23.33 cpe:/a:mysql:mysql:3.23.32 cpe:/a:mysql:mysql:3.23.31 cpe:/a:mysql:mysql:3.23.30 cpe:/a:mysql:mysql:3.23.3 cpe:/a:mysql:mysql:3.23.29 cpe:/a:mysql:mysql:3.23.28 cpe:/a:mysql:mysql:3.23.28:gamma cpe:/a:mysql:mysql:3.23.27 cpe:/a:mysql:mysql:3.23.26 cpe:/a:mysql:mysql:3.23.25 cpe:/a:mysql:mysql:3.23.24 cpe:/a:mysql:mysql:3.23.23 cpe:/a:mysql:mysql:3.23.22 cpe:/a:mysql:mysql:3.23.2 cpe:/a:mysql:mysql:3.23.10 cpe:/a:mysql:mysql:3.22.32 cpe:/a:mysql:mysql:3.22.30 cpe:/a:mysql:mysql:3.22.29 cpe:/a:mysql:mysql:3.22.28 cpe:/a:mysql:mysql:3.22.27 cpe:/a:mysql:mysql:3.22.26 cpe:/a:mysql:mysql:3.20.32a	76

Open Source Vulnerability Database (OSVDB)

id	Description
6421	MySQL mysqld_multi Symlink Arbitrary File Overwrite
6420	MySQL mysqlbug Symlink Arbitrary File Overwrite

Type	Count
Oval ID(s)	2
CPE ID(s)	76
osvdb(s)	2

Related	Severity
CVE-2004-0388	(Low)
CVE-2004-0381	(Low)

Same Subject	Severity
Login to view 2 more Alert(s)

DSA-483

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

Open Source Vulnerability Database (OSVDB)

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU