MySQL Multiple Vulns - update available

FYI…

- http://secunia.com/advisories/16170/
Release Date: 2005-07-22
Critical: Highly critical
Impact: DoS, System access
Where: From remote …

CVE reference: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2096

Solution: Update to version 4.1.13
>>> http://forums.mysql.com/read.php?35,35539,35539#msg-35539
"MySQL 4.1.13 has been released - Date: July 22, 2005 …"

FYI…

MySQL Eventum 1.x vuln - update available
- http://secunia.com/advisories/16255/
Release Date: 2005-07-28
Critical: Highly critical
Impact: System access
Where: From remote…
Software: MySQL Eventum 1.x
CVE reference: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1921
Description:
A vulnerability has been reported in MySQL Eventum, which can be exploited by malicious people to compromise a vulnerable system…
The vulnerability has been reported in version 1.5.4. Prior versions may also be affected.
Solution:
Update to version 1.5.5.
- http://dev.mysql.com/get/Downloads/eventum…ar.gz/from/pick

FYI…

MySQL Eventum Cross-Site Scripting and SQL Injection
- http://secunia.com/advisories/16304/
Release Date: 2005-08-01
Critical: Moderately critical
Impact: Cross Site Scripting, Manipulation of data
Where: From remote …
Software: MySQL Eventum 1.x …
The vulnerabilities have been reported in versions 1.5.5 and prior.
Solution:
Update to version 1.6.0.
http://dev.mysql.com/get/Downloads/eventum…ar.gz/from/pick

Original Advisory:
http://www.gulftech.org/?node=research&art;…=00093-07312005 …"