Oracle MySQL Server CVE-2013-3802 Remote Security Vulnerability
BID:61244
Info
Oracle MySQL Server CVE-2013-3802 Remote Security Vulnerability
| Bugtraq ID: | 61244 |
| Class: | Unknown |
| CVE: |
CVE-2013-3802 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 17 2013 12:00AM |
| Updated: | Mar 19 2015 08:41AM |
| Credit: | Oracle |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE openSUSE 11.4 MySQL AB MySQL 5.5 MySQL AB MySQL 5.1.47 MySQL AB MySQL 5.1.46 MySQL AB MySQL 5.1.45 MySQL AB MySQL 5.1.44 MySQL AB MySQL 5.1.43 MySQL AB MySQL 5.1.42 MySQL AB MySQL 5.1.42 MySQL AB MySQL 5.1.41 MySQL AB MySQL 5.1.39 MySQL AB MySQL 5.1.38 MySQL AB MySQL 5.1.37 MySQL AB MySQL 5.1.36 MySQL AB MySQL 5.1.35 MySQL AB MySQL 5.1.34 MySQL AB MySQL 5.1.33 MySQL AB MySQL 5.1.32 MySQL AB MySQL 5.1.31 MySQL AB MySQL 5.1.30 MySQL AB MySQL 5.1.26 MySQL AB MySQL 5.1.23 MySQL AB MySQL 5.1.22 MySQL AB MySQL 5.1.21 MySQL AB MySQL 5.1.20 MySQL AB MySQL 5.1.18 MySQL AB MySQL 5.1.17 MySQL AB MySQL 5.1.16 MySQL AB MySQL 5.1.15 MySQL AB MySQL 5.1.14 MySQL AB MySQL 5.1.13 MySQL AB MySQL 5.1.12 MySQL AB MySQL 5.1.11 MySQL AB MySQL 5.1.10 MySQL AB MySQL 5.1.9 MySQL AB MySQL 5.1.8 MySQL AB MySQL 5.1.6 MySQL AB MySQL 5.1.5 MySQL AB MySQL 5.1.4 MySQL AB MySQL 5.1.3 MySQL AB MySQL 5.1.2 MySQL AB MySQL 5.1.1 8 MySQL AB MySQL 5.0.63 MySQL AB MySQL 5.1.5A MySQL AB MySQL 5.1.46 Sp1 MySQL AB MySQL 5.1.43 Sp1 MySQL AB MySQL 5.1.40 Sp1 MySQL AB MySQL 5.1.40 MySQL AB MySQL 5.1.37 Sp1 MySQL AB MySQL 5.1.34 Sp1 MySQL AB MySQL 5.1.32-Bzr MySQL AB MySQL 5.1.31 Sp1 MySQL AB MySQL 5.1.29 MySQL AB MySQL 5.1.28 MySQL AB MySQL 5.1.27 MySQL AB MySQL 5.1.25 MySQL AB MySQL 5.1.24 MySQL AB MySQL 5.1.23A MySQL AB MySQL 5.1.23 Bk MySQL AB MySQL 5.1.23 A MySQL AB MySQL 5.1.19 MySQL AB MySQL 5.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
Oracle MySQL Server CVE-2013-3802 Remote Security Vulnerability
Oracle MySQL Server is prone to a remote security vulnerability.
The vulnerability can be exploited over the 'MySQL Protocol' protocol. The 'Full Text Search' sub component is affected.
This vulnerability affects the following supported versions:
5.1.69 and earlier, 5.5.31 and earlier, 5.6.11 and earlier
Oracle MySQL Server is prone to a remote security vulnerability.
The vulnerability can be exploited over the 'MySQL Protocol' protocol. The 'Full Text Search' sub component is affected.
This vulnerability affects the following supported versions:
5.1.69 and earlier, 5.5.31 and earlier, 5.6.11 and earlier
Exploit / POC
Oracle MySQL Server CVE-2013-3802 Remote Security Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle MySQL Server CVE-2013-3802 Remote Security Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
MandrakeSoft Enterprise Server 5 x86_64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva lib64mysql-devel-5.1.70-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64mysql-static-devel-5.1.70-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64mysql16-5.1.70-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mysql-5.1.70-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mysql-bench-5.1.70-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mysql-client-5.1.70-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mysql-common-5.1.70-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
Oracle MySQL Server CVE-2013-3802 Remote Security Vulnerability
References:
References:
- Oracle Homepage (Oracle)
- 2014-05 Junos Space: Multiple vulnerabilities resolved by third party software u (Juniper Networks)
- Oracle Critical Patch Update Advisory - July 2013 (Oracle)