CVE-2013-3809

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html	Mailing List Third Party Advisory
http://osvdb.org/95322	Broken Link Permissions Required Third Party Advisory
http://secunia.com/advisories/54300	Permissions Required Third Party Advisory
http://www.debian.org/security/2013/dsa-2818	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html	Vendor Advisory
http://www.ubuntu.com/usn/USN-1909-1	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/85709	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:mysql::::::::
	cpe:2.3:a:oracle:mysql::::::::

Configuration 2 (hide)

cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*

Configuration 3 (hide)

OR	cpe:2.3:o:opensuse:opensuse:11.4:::::::*
	cpe:2.3:o:opensuse:opensuse:12.2:::::::*
	cpe:2.3:o:opensuse:opensuse:12.3:::::::*
	cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3::::::
	cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::-::*
	cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::vmware::*
	cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3::::::

Configuration 4 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::
	cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::
	cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:13.04:::::::*

Configuration 5 (hide)

OR	cpe:2.3:a:mariadb:mariadb::::::::
	cpe:2.3:a:mariadb:mariadb::::::::

History

26 Aug 2022, 17:23

Type	Values Removed	Values Added
CPE	cpe:2.3:a:oracle:mysql:5.6.4:::::::* cpe:2.3:a:oracle:mysql:5.5.10:::::::* cpe:2.3:a:oracle:mysql:5.5.23:::::::* cpe:2.3:a:oracle:mysql:5.5.25:a:::::: cpe:2.3:a:oracle:mysql:5.5.30:::::::* cpe:2.3:a:oracle:mysql:5.5.25:::::::* cpe:2.3:a:oracle:mysql:5.6.1:::::::* cpe:2.3:a:oracle:mysql:5.5.11:::::::* cpe:2.3:a:oracle:mysql:5.5.14:::::::* cpe:2.3:o:opensuse:suse_linux_enterprise_server:11.0:sp3::::vmware::* cpe:2.3:o:opensuse:suse_linux_enterprise_server:11.0:sp3:::::: cpe:2.3:a:oracle:mysql:5.6.2:::::::* cpe:2.3:a:oracle:mysql:5.6.0:::::::* cpe:2.3:a:oracle:mysql:5.5.2:::::::* cpe:2.3:a:oracle:mysql:5.5.12:::::::* cpe:2.3:a:oracle:mysql:5.5.6:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts::: cpe:2.3:a:oracle:mysql:5.5.15:::::::* cpe:2.3:a:oracle:mysql:5.6.7:::::::* cpe:2.3:a:oracle:mysql:5.6.5:::::::* cpe:2.3:a:oracle:mysql:5.5.17:::::::* cpe:2.3:a:oracle:mysql:5.5.26:::::::* cpe:2.3:a:oracle:mysql:5.5.24:::::::* cpe:2.3:a:oracle:mysql:5.6.3:::::::* cpe:2.3:a:oracle:mysql:5.5.29:::::::* cpe:2.3:a:oracle:mysql:5.5.18:::::::* cpe:2.3:a:oracle:mysql:5.5.7:::::::* cpe:2.3:a:oracle:mysql:5.5.22:::::::* cpe:2.3:a:oracle:mysql:5.5.20:::::::* cpe:2.3:a:oracle:mysql:5.5.4:::::::* cpe:2.3:a:oracle:mysql:5.5.21:::::::* cpe:2.3:a:oracle:mysql:5.5.27:::::::* cpe:2.3:a:oracle:mysql:5.6.10:::::::* cpe:2.3:a:oracle:mysql:5.5.5:::::::* cpe:2.3:a:oracle:mysql:5.5.1:::::::* cpe:2.3:a:oracle:mysql:5.5.16:::::::* cpe:2.3:a:oracle:mysql:5.6.6:::::::* cpe:2.3:a:oracle:mysql:5.5.9:::::::* cpe:2.3:a:oracle:mysql:5.5.0:::::::* cpe:2.3:a:oracle:mysql:5.6.8:::::::* cpe:2.3:o:opensuse:suse_linux_enterprise_software_development_kit:11.0:sp3:::::: cpe:2.3:o:opensuse:suse_linux_enterprise_desktop:11.0:sp3:::::: cpe:2.3:a:oracle:mysql:5.5.19:::::::* cpe:2.3:a:oracle:mysql:5.5.13:::::::* cpe:2.3:a:oracle:mysql:5.5.28:::::::* cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts::: cpe:2.3:a:oracle:mysql:5.6.9:::::::* cpe:2.3:a:oracle:mysql:5.5.3:::::::*	cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:::::: cpe:2.3:o:canonical:ubuntu_linux:12.04::::-::: cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::-::* cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::vmware::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:a:mariadb:mariadb:::::::: cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3::::::
References	~~(OSVDB) http://osvdb.org/95322 - Permissions Required, Third Party Advisory~~	(OSVDB) http://osvdb.org/95322 - Broken Link, Permissions Required, Third Party Advisory
References	~~(SUSE) http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html - Third Party Advisory~~	(SUSE) http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html - Mailing List, Third Party Advisory
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html - Third Party Advisory~~	(SUSE) http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html - Mailing List, Third Party Advisory
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html - Third Party Advisory~~	(SUSE) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html - Mailing List, Third Party Advisory
References	~~(SUSE) http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html - Third Party Advisory~~	(SUSE) http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html - Mailing List, Third Party Advisory
References	~~(XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/85709 -~~	(XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/85709 - Third Party Advisory, VDB Entry

Information

Published : 2013-07-17 13:41

Updated : 2024-02-04 18:16

NVD link : CVE-2013-3809

Mitre link : CVE-2013-3809

CVE.ORG link : CVE-2013-3809

JSON object : View

Products Affected

oracle

mysql
solaris

opensuse

opensuse

canonical

ubuntu_linux

suse

linux_enterprise_server
linux_enterprise_software_development_kit
linux_enterprise_desktop

mariadb

mariadb

CWE

NVD-CWE-noinfo

4.0 /10