• info
• discussion
• exploit
• solution
• references

Conectiva Linux MySQL World Readable Log File Vulnerability

Solution:
Conectiva has released an upgrade. However, if an upgrade is not possible at this time users are recommended to:

chmod 600 /var/log/mysql*
chown mysql.mysql /var/log/mysql*


Conectiva Linux 5.0

• Conectiva MySQL-3.23.36-14U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/MySQL-3.23.36-14U50_1cl.i 386.rpm

Conectiva Linux 5.1

• Conectiva MySQL-3.23.36-14U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/MySQL-3.23.36-14U51_1cl.i 386.rpm

Conectiva Linux 6.0

• Conectiva MySQL-3.23.36-14U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/MySQL-3.23.36-14U60_1cl.i 386.rpm