Riktigt giftigt säkerhetshål i MySQL

Dawid Golunski:

An independent research has revealed multiple severe MySQL vulnerabilities.

This advisory focuses on a critical vulnerability with a CVEID of CVE-2016-6662. The vulnerability affects MySQL servers in all version branches (5.7, 5.6, and 5.5) including the latest versions, and could be exploited by both local and remote attackers.

Both the authenticated access to MySQL database (via network connection or web interfaces such as phpMyAdmin) and SQL Injection could be used as exploitation vectors.

Successful exploitation could allow attackers to execute arbitrary code with root privileges which would then allow them to fully compromise the server on which an affected version of MySQL is running.


(Tack till Hyper-V för tipset)


© 2020 Omsoc Publishing AB