oval:org.mitre.oval:def:13088

Definition Id: oval:org.mitre.oval:def:13088

Oval ID:	oval:org.mitre.oval:def:13088
Title:	USN-897-1 -- mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities
Description:	It was discovered that MySQL could be made to overwrite existing table files in the data directory. An authenticated user could use the DATA DIRECTORY and INDEX DIRECTORY options to possibly bypass privilege checks. This update alters table creation behaviour by disallowing the use of the MySQL data directory in DATA DIRECTORY and INDEX DIRECTORY options. This issue only affected Ubuntu 8.10. It was discovered that MySQL contained a cross-site scripting vulnerability in the command-line client when the --html option is enabled. An attacker could place arbitrary web script or html in a database cell, which would then get placed in the html document output by the command-line tool. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. It was discovered that MySQL could be made to overwrite existing table files in the data directory. An authenticated user could use symlinks combined with the DATA DIRECTORY and INDEX DIRECTORY options to possibly bypass privilege checks. This issue only affected Ubuntu 9.10. It was discovered that MySQL contained multiple format string flaws when logging database creation and deletion. An authenticated user could use specially crafted database names to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. It was discovered that MySQL incorrectly handled errors when performing certain SELECT statements, and did not preserve correct flags when performing statements that use the GeomFromWKB function. An authenticated user could exploit this to make MySQL crash, causing a denial of service. It was discovered that MySQL incorrectly checked symlinks when using the DATA DIRECTORY and INDEX DIRECTORY options. A local user could use symlinks to create tables that pointed to tables known to be created at a later time, bypassing access restrictions. It was discovered that MySQL contained a buffer overflow when parsing ssl certificates. A remote attacker could send crafted requests and cause a denial of service or possibly execute arbitrary code. This issue did not affect Ubuntu 6.06 LTS and the default compiler options for affected releases should reduce the vulnerability to a denial of service. In the default installation, attackers would also be isolated by the AppArmor MySQL profile
Family:	unix	Class:	patch
Reference(s):	USN-897-1 CVE-2008-4098 CVE-2008-4456 CVE-2008-7247 CVE-2009-2446 CVE-2009-4019 CVE-2009-4030 CVE-2009-4484	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 8.10 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	mysql-dfsg-5.0 mysql-dfsg-5.1
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section mysql-client DPKG is earlier than 5.0.51a-3ubuntu5.5 AND mysql-common DPKG is earlier than 5.0.51a-3ubuntu5.5 AND mysql-server DPKG is earlier than 5.0.51a-3ubuntu5.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libmysqlclient15-dev DPKG is earlier than 5.0.51a-3ubuntu5.5 AND mysql-client-5.0 DPKG is earlier than 5.0.51a-3ubuntu5.5 AND mysql-server-5.0 DPKG is earlier than 5.0.51a-3ubuntu5.5 AND libmysqlclient15off DPKG is earlier than 5.0.51a-3ubuntu5.5 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section mysql-client DPKG is earlier than 5.0.67-0ubuntu6.1 AND mysql-common DPKG is earlier than 5.0.67-0ubuntu6.1 AND mysql-server DPKG is earlier than 5.0.67-0ubuntu6.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libmysqlclient15-dev DPKG is earlier than 5.0.67-0ubuntu6.1 AND mysql-client-5.0 DPKG is earlier than 5.0.67-0ubuntu6.1 AND mysql-server-5.0 DPKG is earlier than 5.0.67-0ubuntu6.1 AND libmysqlclient15off DPKG is earlier than 5.0.67-0ubuntu6.1 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section mysql-client DPKG is earlier than 5.1.37-1ubuntu5.1 AND libmysqlclient16-dev DPKG is earlier than 5.1.37-1ubuntu5.1 AND mysql-common DPKG is earlier than 5.1.37-1ubuntu5.1 AND mysql-server DPKG is earlier than 5.1.37-1ubuntu5.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libmysqlclient-dev DPKG is earlier than 5.1.37-1ubuntu5.1 AND libmysqld-pic DPKG is earlier than 5.1.37-1ubuntu5.1 AND mysql-client-5.1 DPKG is earlier than 5.1.37-1ubuntu5.1 AND libmysqlclient16 DPKG is earlier than 5.1.37-1ubuntu5.1 AND mysql-server-5.1 DPKG is earlier than 5.1.37-1ubuntu5.1 AND libmysqld-dev DPKG is earlier than 5.1.37-1ubuntu5.1 AND mysql-server-core-5.1 DPKG is earlier than 5.1.37-1ubuntu5.1 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section mysql-client DPKG is earlier than 5.0.22-0ubuntu6.06.12 AND mysql-common DPKG is earlier than 5.0.22-0ubuntu6.06.12 AND mysql-server DPKG is earlier than 5.0.22-0ubuntu6.06.12 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libmysqlclient15-dev DPKG is earlier than 5.0.22-0ubuntu6.06.12 AND mysql-client-5.0 DPKG is earlier than 5.0.22-0ubuntu6.06.12 AND libmysqlclient15off DPKG is earlier than 5.0.22-0ubuntu6.06.12 AND mysql-server-5.0 DPKG is earlier than 5.0.22-0ubuntu6.06.12 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section mysql-client DPKG is earlier than 5.1.30really5.0.75-0ubuntu10.3 AND mysql-common DPKG is earlier than 5.1.30really5.0.75-0ubuntu10.3 AND mysql-server DPKG is earlier than 5.1.30really5.0.75-0ubuntu10.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libmysqlclient15-dev DPKG is earlier than 5.1.30really5.0.75-0ubuntu10.3 AND mysql-client-5.0 DPKG is earlier than 5.1.30really5.0.75-0ubuntu10.3 AND mysql-server-5.0 DPKG is earlier than 5.1.30really5.0.75-0ubuntu10.3 AND libmysqlclient15off DPKG is earlier than 5.1.30really5.0.75-0ubuntu10.3 AND mysql-server-core-5.0 DPKG is earlier than 5.1.30really5.0.75-0ubuntu10.3

Definition Id: oval:org.mitre.oval:def:13079

Oval ID:	oval:org.mitre.oval:def:13079
Title:	Ubuntu 9.10 is installed
Description:	Ubuntu 9.10 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:canonical:ubuntu_linux:9.10	Version:	5
Platform(s):	Ubuntu 9.10	Product(s):
Definition Synopsis:
Ubuntu 9.10 is installed
Referenced By:
oval:org.mitre.oval:def:13088

Definition Id: oval:org.mitre.oval:def:13250

Oval ID:	oval:org.mitre.oval:def:13250
Title:	Ubuntu 8.04 is installed
Description:	Ubuntu 8.04 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:8.04	Version:	3
Platform(s):	Ubuntu 8.04	Product(s):
Definition Synopsis:
Ubuntu 8.04 is installed
Referenced By:
oval:org.mitre.oval:def:13088

Definition Id: oval:org.mitre.oval:def:13319

Oval ID:	oval:org.mitre.oval:def:13319
Title:	Ubuntu 6.06 is installed
Description:	Ubuntu 6.06 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:6.06	Version:	3
Platform(s):	Ubuntu 6.06	Product(s):
Definition Synopsis:
Ubuntu 6.06 is installed
Referenced By:
oval:org.mitre.oval:def:13088

Definition Id: oval:org.mitre.oval:def:13306

Oval ID:	oval:org.mitre.oval:def:13306
Title:	Ubuntu 8.10 is installed
Description:	Ubuntu 8.10 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:8.10	Version:	3
Platform(s):	Ubuntu 8.10	Product(s):
Definition Synopsis:
Ubuntu 8.10 is installed
Referenced By:
oval:org.mitre.oval:def:13088

Definition Id: oval:org.mitre.oval:def:12669

Oval ID:	oval:org.mitre.oval:def:12669
Title:	Ubuntu 9.04 is installed
Description:	Ubuntu 9.04 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:canonical:ubuntu_linux:9.04	Version:	5
Platform(s):	Ubuntu 9.04	Product(s):
Definition Synopsis:
Ubuntu 9.04 is installed
Referenced By:
oval:org.mitre.oval:def:13088

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0374s

Facebook rss twitter linkedin mail