CVE-2012-5627
01.10.2013, 17:55
Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| oracle | mysql | 5.5.0 ≤ 𝑥 < 5.5.29 |
| mariadb | mariadb | 5.2.0 ≤ 𝑥 < 5.2.14 |
| mariadb | mariadb | 5.3.0 ≤ 𝑥 < 5.3.12 |
| mariadb | mariadb | 5.5.0 ≤ 𝑥 < 5.5.29 |
| mariadb | mariadb | 10.0.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mariadb-5.5 |
| ||||||||||||||||||||||||||
| mysql-5.5 |
| ||||||||||||||||||||||||||
| mysql-5.6 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| libmariadbd104-devel |
| ||||||||
| libmariadbd19 |
| ||||||||
| libmysqld-devel |
| ||||||||
| libmysqld19 |
| ||||||||
| mariadb |
| ||||||||
| mariadb-client |
| ||||||||
| mariadb-errormessages |
| ||||||||
| mariadb-tools |
| ||||||||
| mariadb104 |
| ||||||||
| mariadb104-bench |
| ||||||||
| mariadb104-client |
| ||||||||
| mariadb104-errormessages |
| ||||||||
| mariadb104-galera |
| ||||||||
| mariadb104-rpm-macros |
| ||||||||
| mariadb104-test |
| ||||||||
| mariadb104-tools |
| ||||||||
| python3-mysqlclient |
|
Common Weakness Enumeration
References