CVE-2012-5615
03.12.2012, 12:49
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mariadb | mariadb | 5.1.66 |
| mariadb | mariadb | 5.2.13 |
| mariadb | mariadb | 5.3.11 |
| mariadb | mariadb | 5.5.28a:a |
| oracle | mysql | 5.5.19 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mariadb-5.5 |
| ||||||||||||||||||||||
| mysql-5.5 |
| ||||||||||||||||||||||
| mysql-5.6 |
| ||||||||||||||||||||||
| mysql-dfsg-5.1 |
|
Common Weakness Enumeration
References