Published: 03/12/2012 Updated: 13/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 510

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Oracle MySQL 5.5.38 and previous versions, 5.6.19 and previous versions, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote malicious users to enumerate valid usernames.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mariadb mariadb 5.5.28a
oracle mysql 5.5.19
mariadb mariadb 5.2.13
mariadb mariadb 5.1.66
mariadb mariadb 5.3.11

Several security issues were fixed in MySQL ...

Debian Bug report logs - #695001 mysql-55: New MySQL issues Package: mysql-55; Maintainer for mysql-55 is Debian MySQL Maintainers <pkg-mysql-maint@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Mon, 3 Dec 2012 07:54:02 UTC Severity: grave Tags: security Fixed in version mysql-5 ...

Several issues have been discovered in the MySQL database server The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5540 Please see the MySQL 55 Release Notes and Oracle's Critical Patch Update advisory for further details: devmysqlcom/doc/relnotes/mysql/55/en/news-5-5-39html devmysqlcom/doc ...

*** FARLiGHT ELiTE HACKERS LEGACY R3L3ASE *** Attached is the MySQL Windows Remote Exploit (post-auth, udf technique) including the previously released mass scanner The exploit is mirrored at the farlight website wwwfarlightorg Oracle MySQL on Windows Remote SYSTEM Level Exploit zeroday All owned By Kingcope githubcom/offensi ...

# MySQL User Account Enumeration Utility # When an attacker authenticates using an incorrect password # with the old authentication mechanism from mysql 4x and below to a mysql 5x server # the mysql server will respond with a different message than Access Denied, what makes # User Account Enumeration possible # The Downside is that the attacker ...

CWE-200 https://mariadb.atlassian.net/browse/MDEV-3909 http://seclists.org/fulldisclosure/2012/Dec/9 http://www.openwall.com/lists/oss-security/2012/12/02/3 http://www.openwall.com/lists/oss-security/2012/12/02/4 http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html http://security.gentoo.org/glsa/glsa-201308-06.xml http://www.mandriva.com/security/advisories?name=MDVSA-2013:102 http://secunia.com/advisories/53372 http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html https://usn.ubuntu.com/2384-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/23073/

CVE-2012-5615

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect