Vulnerability CVE-2013-5807

Vulnerability Name:

CVE-2013-5807 (CCN-88023)

Assigned:

2013-10-15

Published:

2013-10-15

Updated:

2022-08-04

Summary:

Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Replication.

CVSS v3 Severity:

3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.9 Medium (CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N)
3.6 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

4.9 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N)
3.6 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

4.9 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N)
3.6 Low (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Unknown

References:

Source: MITRE
Type: CNA
CVE-2013-5807

Source: CCN
Type: RHSA-2014-0173
Moderate: mysql55-mysql security update

Source: REDHAT
Type: Third Party Advisory
RHSA-2014:0173

Source: CCN
Type: RHSA-2014-0186
Moderate: mysql55-mysql security update

Source: REDHAT
Type: Third Party Advisory
RHSA-2014:0186

Source: REDHAT
Type: Third Party Advisory
RHSA-2014:0189

Source: GENTOO
Type: Third Party Advisory
GLSA-201409-04

Source: DEBIAN
Type: Third Party Advisory
DSA-2818

Source: DEBIAN
Type: DSA-2818
mysql-5.5 -- several vulnerabilities

Source: CCN
Type: Oracle Web site
Oracle Critical Patch Update - October 2013

Source: CONFIRM
Type: Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Source: BID
Type: Third Party Advisory, VDB Entry
63105

Source: CCN
Type: BID-63105
Oracle MySQL Server CVE-2013-5807 Remote Security Vulnerability

Source: SECTRACK
Type: Broken Link, Third Party Advisory, VDB Entry
1029184

Source: UBUNTU
Type: Third Party Advisory
USN-2006-1

Source: XF
Type: UNKNOWN
oracle-cpuoct2013-cve20135807(88023)

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2013-5807

Vulnerable Configuration:

Configuration 1:

cpe:/a:oracle:mysql:*:*:*:*:*:*:*:* (Version >= 5.6.0 and <= 5.6.12)

OR cpe:/a:oracle:mysql:*:*:*:*:*:*:*:* (Version >= 5.5.0 and <= 5.5.32)

Configuration 2:

cpe:/a:mariadb:mariadb:*:*:*:*:*:*:*:* (Version >= 10.0.0 and < 10.0.5)

OR cpe:/a:mariadb:mariadb:*:*:*:*:*:*:*:* (Version >= 5.5.0 and < 5.5.33)

Configuration 3:

cpe:/o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Configuration 4:

cpe:/o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

OR cpe:/o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

Configuration 5:

cpe:/o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

Configuration CCN 1:

cpe:/a:oracle:mysql:5.5.10:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.11:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.12:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.13:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.14:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.15:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.16:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.17:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.18:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.19:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.20:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.21:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.23:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.22:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.26:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.24:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.25:a:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.25:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.27:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.28:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.10:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.7:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.8:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.6:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.2:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.4:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.3:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.5:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.9:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.29:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.30:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.11:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.31:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.6.12:*:*:*:*:*:*:*

OR cpe:/a:oracle:mysql:5.5.32:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

OR cpe:/a:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:24189	P	RHSA-2014:0186: mysql55-mysql security update (Moderate)	2014-07-07
oval:org.mitre.oval:def:19387	P	USN-2006-1 -- mysql-5.5, mysql-dfsg-5.1 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:20803	P	DSA-2818-1 mysql-5.5 - several	2014-06-23
oval:org.mitre.oval:def:22920	P	ELSA-2014:0186: mysql55-mysql security update (Moderate)	2014-05-26
oval:com.redhat.rhsa:def:20140186	P	RHSA-2014:0186: mysql55-mysql security update (Moderate)	2014-02-18
oval:com.ubuntu.precise:def:20135807000	V	CVE-2013-5807 on Ubuntu 12.04 LTS (precise) - medium.	2013-10-16

BACK