Lucene search
Ubuntu.comUB:CVE-2012-5627HistoryOct 01, 2013 - 12:00 a.m.
CVE-2012-5627
2013-10-0100:00:00
ubuntu.com
ubuntu.com
15
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.7%
Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and
5.2.x before 5.2.14 does not modify the salt during multiple executions of
the change_user command within the same connection which makes it easier
for remote authenticated users to conduct brute force password guessing
attacks.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=883719>
- <https://mariadb.atlassian.net/browse/MDEV-3915>
Notes
| Author | Note |
|---|---|
| mdeslaur | as of 2016-11-23, no indication of fix from upstream MySQL. marking this as ignored since we will not diverge from upstream. |
Related
cve
cve
CVE-2012-5627
2013-10-01 17:55:00
mariadbunix
mariadbunix
CVE-2012-5627
2013-10-01 17:55:00
cbl_mariner
cbl_mariner
CVE-2012-5627 affecting package mysql 8.0.29-1
2021-09-09 15:03:39
CVE-2012-5627 affecting package mysql for versions less than 8.0.24-1
2022-04-09 06:53:03
openvas
openvas
MariaDB 'COM_CHANGE_USER' Command Insecure Salt Generation Security Bypass Vulnerability - Linux
2016-06-07 00:00:00
MariaDB 'COM_CHANGE_USER' Command Insecure Salt Generation Security Bypass Vulnerability
2013-11-06 00:00:00
Ubuntu Update for mysql-5.5 USN-1807-1
2013-04-25 00:00:00
nessus
nessus
MySQL Server COM_CHANGE_USER Command Security Bypass
2013-11-27 00:00:00
FreeBSD : mysql/mariadb/percona server -- multiple vulnerabilities (8c773d7f-6cbb-11e2-b242-c8600054b392)
2013-02-04 00:00:00
Mandriva Linux Security Advisory : mariadb (MDVSA-2013:102)
2013-04-20 00:00:00
prion
prion
Command injection
2013-10-01 17:55:00
seebug
seebug
Oracle MySQL/MariaDB ไธๅฎๅ
จSalt็ๆๅฎๅ
จ็ป่ฟๆผๆด(CVE-2012-5627)
2012-12-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package mariadb version April
2013-04-01 00:00:00
freebsd
freebsd
mysql/mariadb/percona server -- multiple vulnerabilities
2012-12-01 00:00:00
gentoo
gentoo
MySQL: Multiple vulnerabilities
2013-08-29 00:00:00
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.7%
Related for UB:CVE-2012-5627