(PVS) Signatures - Tenable Network Security

even when altered by another user, which could allow that user to gain the access rights of
the view. (Bug #29908)\n\n - When using a FEDERATED table, the local server can be
forced to crash if the remote server returns a result with fewer columns than expected. (Bug
#29801)
Solution: Upgrade to version 5.0.52 or higher.
CVE-2007-6304
MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities
PVS ID: 4313 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:29345
Description: Synopsis :\n\nThe remote database server is affected by several issues.\n\nThe version of
MySQL Server installed on the remote host reportedly is affected by the following issues
:\n\n - It is possible, by creating a partitioned table using the DATA DIRECTORY and
INDEX DIRECTORY options, to gain privileges on other tables having the same name as
the partitioned table. (Bug #32091)\n\n - Using RENAME TABLE against a table with
explicit DATA DIRECTORY and INDEX DIRECTORY options can be used to overwrite
system table information. (Bug #32111).\n\n - ALTER VIEW retains the original
DEFINER value, even when altered by another user, which can allow that user to gain the
access rights of the view. (Bug #29908)\n\n - When using a FEDERATED table, the local
server can be forced to crash if the remote server returns a result with fewer columns than
expected. (Bug #29801)
Solution: Upgrade to version 5.1.23, 6.0.4 or higher.
CVE-2007-6304
QuickTime < 7.3.1 Multiple Vulnerabilities
PVS ID: 4314 FAMILY: Web Clients RISK: HIGH NESSUS ID:29698
Description: Synopsis :\n\nThe remote host contains an application that is affected by multiple
vulnerabilities.\n\n The version of QuickTime installed on the remote host is older than
7.3.1. Such versions contain several vulnerabilities that may allow an attacker to execute
arbitrary code on the remote host if a user opens a specially-crafted RTSP movie, QTL file
or Flash media file with QuickTime.
Solution: Upgrade to version 7.3.1 or higher.
CVE-2007-6166
Passive Vulnerability Scanner (PVS) Signatures
WebGUI < 7.4.18 Secondary Admin Remote Privilege Escalation
PVS ID: 4315 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1123