N/A

The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks and Man In The Middle attacks in which the server response could be modified to allow the attacker to respond with modified command payload and have the client return additional running configuration information leading to an information disclosure of running configuration of MySQL.

N/A

N/A

Percona percona-toolkit和xtrabackup 安全漏洞

Percona percona-toolkit和xtrabackup都是美国Percona公司的产品。percona-toolkit是一套高级命令行工具。xtrabackup是一套开源的用来备份MySQL的InnoDB数据库的工具。version checking subroutine是其中的一个版本检查子程序。 Percona percona-toolkit 2.2.13之前的版本和xtrabackup 2.2.9之前的版本中的version checking subroutine存在安全漏洞。攻击者可

N/A

N/A