Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:11508
HistoryJan 15, 2019 - 9:02 a.m.

Information Disclosure

2019-01-1509:02:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

mysql55-myql is vulnerable to information disclosure attacks. The vulnerability exists as Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.

References

Related

cve 1
ubuntucve 1
openvas 14
packetstorm 1
mariadbunix 1
nessus 25
prion 1
altlinux 1
suse 3
thn 1
freebsd 1
securityvulns 2
threatpost 1
fedora 1
redhat 4
centos 2
debian 2
osv 1
ubuntu 1
f5 2
gentoo 1
oracle 1
cve
cve
CVE-2012-5615
2012-12-03 12:49:00
ubuntucve
ubuntucve
CVE-2012-5615
2012-12-03 00:00:00
openvas
openvas
MariaDB Authentication Error Message User Enumeration Vulnerability
2012-12-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0262-1)
2021-06-09 00:00:00
Oracle MySQL Server <= 5.5.38 / 5.6 <= 5.6.19 Security Update (cpuoct2014) - Linux
2016-06-03 00:00:00
packetstorm
packetstorm
Oracle MySQL User Account Enumeration Utility
2012-12-03 00:00:00
mariadbunix
mariadbunix
CVE-2012-5615
2012-12-03 12:49:00
nessus
nessus
MySQL Protocol Remote User Enumeration
2013-01-28 00:00:00
SuSE 11.2 Security Update : MySQL (SAT Patch Number 7251)
2013-02-10 00:00:00
FreeBSD : mysql/mariadb/percona server -- multiple vulnerabilities (8c773d7f-6cbb-11e2-b242-c8600054b392)
2013-02-04 00:00:00
prion
prion
Buffer overflow
2012-12-03 12:49:00
altlinux
altlinux
Security fix for the ALT Linux 8 package mariadb version April
2013-04-01 00:00:00
suse
suse
Security update for MySQL (important)
2013-02-09 16:04:18
Security update for MySQL (important)
2015-03-28 01:04:56
Security update for mariadb (important)
2015-04-21 19:05:04
thn
thn
Multiple MySQL database Zero-day vulnerabilities published
2012-12-03 13:54:00
freebsd
freebsd
mysql/mariadb/percona server -- multiple vulnerabilities
2012-12-01 00:00:00
securityvulns
securityvulns
MySQL multiple security vulnerabilities
2012-12-07 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2014-11-03 00:00:00
threatpost
threatpost
Experts Downplay MySQL Database Zero-Days
2012-12-03 19:31:06
fedora
fedora
[SECURITY] Fedora 20 Update: mariadb-galera-5.5.40-2.fc20
2014-12-03 01:02:24
redhat
redhat
(RHSA-2014:1861) Important: mariadb security update
2014-11-17 00:00:00
(RHSA-2014:1940) Important: mariadb-galera security update
2014-12-02 16:44:45
(RHSA-2014:1937) Important: mariadb-galera security update
2014-12-02 16:39:58
centos
centos
mariadb security update
2014-11-17 17:32:07
mysql55 security update
2014-11-17 17:35:05
debian
debian
[SECURITY] [DSA 3054-1] mysql-5.5 security update
2014-10-20 15:27:13
[SECURITY] [DSA 3054-1] mysql-5.5 security update
2014-10-20 16:19:38
osv
osv
mysql-5.5 - security update
2014-10-20 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2014-10-15 00:00:00
f5
f5
K15725 : Multiple 5.5.x and 5.6.x MySQL vulnerabilities
2014-10-23 00:00:00
SOL15725 - Multiple 5.5.x and 5.6.x MySQL vulnerabilities
2014-10-23 00:00:00
gentoo
gentoo
MySQL: Multiple vulnerabilities
2013-08-29 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2014
2014-10-14 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON
Related for VERACODE:11508
cve1ubuntucve1openvas14packetstorm1mariadbunix1nessus25prion1altlinux1suse3thn1freebsd1securityvulns2threatpost1fedora1redhat4centos2debian2osv1ubuntu1f52gentoo1oracle1