Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://www.zataz.net/adviso/mysql-05172005.txt
http://www.vuxml.org/freebsd/eeae6cce-d05c-11d9-9aed-000e0c2e438a.html
Insight
The following package is affected: mysql-server
CVE-2005-1636
mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents.
Severity
Classification
-
CVE CVE-2005-1636 -
CVSS Base Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities