CVE-2012-5096

2013-01-1701:55:03

oracle

web.nvd.nist.gov

cve-2012-5096

oracle

mysql

vulnerability

nvd

server component

remote authenticated users

server privileges

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

AI Score

4.5

Confidence

High

EPSS

0.003

Percentile

68.4%

JSON

Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users with Server Privileges to affect availability via unknown vectors.

Affected configurations

Nvd

Node

oraclemysqlRange5.5.0–5.5.28

Node

mariadbmariadbRange5.5.0–5.5.29

mariadbmariadbMatch10.0.0

Node

canonicalubuntu_linuxMatch10.04-

canonicalubuntu_linuxMatch11.10

canonicalubuntu_linuxMatch12.04-

canonicalubuntu_linuxMatch12.10

VendorProductVersionCPE
oraclemysql*cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
mariadbmariadb*cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
mariadbmariadb10.0.0cpe:2.3:a:mariadb:mariadb:10.0.0:*:*:*:*:*:*:*
canonicalubuntu_linux10.04cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
canonicalubuntu_linux11.10cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
canonicalubuntu_linux12.04cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
canonicalubuntu_linux12.10cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	mysql	*	cpe:2.3:a:oracle:mysql::::::::
mariadb	mariadb	*	cpe:2.3:a:mariadb:mariadb::::::::
mariadb	mariadb	10.0.0	cpe:2.3:a:mariadb:mariadb:10.0.0:::::::*
canonical	ubuntu_linux	10.04	cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::
canonical	ubuntu_linux	11.10	cpe:2.3:o:canonical:ubuntu_linux:11.10:::::::*
canonical	ubuntu_linux	12.04	cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::
canonical	ubuntu_linux	12.10	cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*