PT-2016-3108 · Mysql Server+6 · Mysql Server+6

Published 2016-10-17 · Updated 2022-07-18 · CVE-2017-3600

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MySQL Server (affected versions not specified)

Description The issue is related to inadequate access control in the MySQL Server component of the MySQL database management system. It may allow a remote attacker to compromise the confidentiality of information by exploiting network packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

ALT-PU-2016-2272

ALT-PU-2017-1931

BDU:2017-01148

CESA-2017_2192

CVE-2017-3600

DLA-916-1

DSA-3834-1

OPENSUSE-SU-2017_1209-1

RHSA-2016:2927

RHSA-2016:2928

RHSA-2017:2192

RHSA-2017:2787

RHSA-2017:2886

RHSA-2017_2192

SUSE-SU-2017:1137-1

USN-3269-1

USN-3357-2

Affected Products

Alt Linux

Centos

Mariadb Server

Mysql Server

Red Hat

Suse

Ubuntu

References · 194

• 🔥 https://github.com/SECFORCE/CVE-2017-3599/blob/master/cve-2017-3599_poc.py · Exploit
• 🔥 https://github.com/SECFORCE/CVE-2017-3599 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3453 · Security Note
• https://bdu.fstec.ru/vul/2017-01149 · Security Note
• https://bdu.fstec.ru/vul/2017-01156 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3464 · Security Note
• https://bdu.fstec.ru/vul/2017-01124 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3600 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-3453 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01120 · Security Note
• https://ubuntu.com/security/CVE-2017-3454 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01127 · Security Note
• https://bdu.fstec.ru/vul/2017-00239 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3318 · Security Note
• https://bdu.fstec.ru/vul/2017-01155 · Security Note