CVE-2013-0389

published 2013-01-17

CVE-2013-0389: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect…

Priority P4 28 medium 6.8 CVSS 2.0

AV N AC L Au S C N I N A C

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
mariadb	mariadb	—	—
mariadb	mariadb	>= 5.1.0 < 5.1.67	5.1.67
mariadb	mariadb	>= 5.2.0 < 5.2.14	5.2.14
mariadb	mariadb	>= 5.3.0 < 5.3.12	5.3.12
mariadb	mariadb	>= 5.5.0 < 5.5.29	5.5.29
oracle	mysql	5.1.0 – 5.1.66	—
oracle	mysql	5.5.0 – 5.5.28	—

CVSS provenance

nvd v2.0 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C

vendor_redhat 6.8 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.