78374 : Oracle MySQL Server Unspecified Remote Issue (2012-0075)
Printer | http://osvdb.org/78374 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
9	931	over 1 year ago	4 months ago	4 times	100%

Timeline

Disclosure Date
2012-01-17

Description

Oracle MySQL Server contains an unspecified flaw related to the MySQL Protocol that may allow a remote attacker to cause a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Attack Type Unknown
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Unknown
Disclosure: Vendor Verified
OSVDB: Authentication Required

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Oracle has released a patch to address this vulnerability. Check the vendor advisory or solution in the references section.

Products

Oracle Corporation	MySQL	5.1.x
		5.5.x
		5.0.x

References

Security Tracker: 1026530
CVE ID: 2012-0075 (see also: NVD)
Secunia Advisory ID: 47082 47586 47928 47960 48250 49174 49180 50229
Bugtraq ID: 51526
ISS X-Force ID: 72539
Related OSVDB ID: 78368 78369 78370 78371 78372 78373 78375 78376 78377 78378 78379 78380 78381 78382 78383 78384 78385 78386 78387 78388 78389 78390 78391 78392 78393 78394
Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html
http://www.debian.org/security/2012/dsa-2429
http://www.ubuntu.com/usn/usn-1397-1/
https://hermes.opensuse.org/messages/14566469
https://hermes.opensuse.org/messages/14566510
Vendor Specific Advisory URL: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html#AppendixMSQL
RedHat RHSA: RHSA-2012:0105 RHSA-2012:0127

Credit

Not Available

CVSSv2 Score

CVSSv2 Base Score = 1.7
Source: nvd.nist.gov | Generated: 2012-01-19 | Disagree?

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.