NVD Vulnerability Detail

CVE-2013-0375

Summary	Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.
Publication Date	Jan. 17, 2013, 10:55 a.m.
Registration Date	Jan. 26, 2021, 3:33 p.m.
Last Update	Nov. 21, 2024, 10:47 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:oracle:mysql::::::::		5.1.0	5.1.66

Configuration4	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:6.3:::::::*

Related information, measures and tools

No	URL	タグ
1	http://rhn.redhat.com/errata/RHSA-2013-0219.html	Third Party Advisory
2	http://rhn.redhat.com/errata/RHSA-2013-0219.html	Third Party Advisory
3	http://secunia.com/advisories/53372	Not Applicable Third Party Advisory
4	http://secunia.com/advisories/53372	Not Applicable Third Party Advisory
5	http://security.gentoo.org/glsa/glsa-201308-06.xml	Third Party Advisory
6	http://security.gentoo.org/glsa/glsa-201308-06.xml	Third Party Advisory
7	http://www.mandriva.com/security/advisories?name=MDVSA-2013:150	Broken Link Third Party Advisory
8	http://www.mandriva.com/security/advisories?name=MDVSA-2013:150	Broken Link Third Party Advisory
9	http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html	Vendor Advisory
10	http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html	Vendor Advisory
11	http://www.ubuntu.com/usn/USN-1703-1	Third Party Advisory
12	http://www.ubuntu.com/usn/USN-1703-1	Third Party Advisory
13	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17175	Third Party Advisory
14	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17175	Third Party Advisory

Common Vulnerabilities List

JVN Vulnerability Information

Oracle MySQL の MySQL Server における Server Replication の処理に関する脆弱性

Title	Oracle MySQL の MySQL Server における Server Replication の処理に関する脆弱性
Summary	Oracle MySQL の MySQL Server には、Server Replication に関する処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。
Possible impacts	リモート認証されたユーザにより、情報を取得される、あるいは情報を改ざんされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 15, 2013, midnight
Registration Date	Jan. 18, 2013, 4:25 p.m.
Last Update	Nov. 8, 2013, 10:59 a.m.

Affected System

オラクル

MySQL 5.1.66 およびそれ以前の 5.1.x

MySQL AB

MySQL 5.1.28 およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2013-0375	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0375
National Vulnerability Database (NVD)
2	CVE-2013-0375	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0375

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	Name	URL
Gentoo Linux Security Advisory
1	GLSA 201308-06	http://security.gentoo.org/glsa/glsa-201308-06.xml
Oracle Critical Patch Update
2	Oracle Critical Patch Update Advisory - January 2013	http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
3	Text Form of Oracle Critical Patch Update - January 2013 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujan2013verbose-1897756.html
Red Hat Security Advisory
4	RHSA-2013:0219	http://rhn.redhat.com/errata/RHSA-2013-0219.html
Security Advisories
5	MDVSA-2013:150	http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
SECURITY BLOG
6	January 2013 Critical Patch Update Released	https://blogs.oracle.com/security/entry/january_2013_critical_patch_update
Ubuntu Security Notice
7	USN-1703-1	http://www.ubuntu.com/usn/USN-1703-1/

Change Log

No	Changed Details	Date of change
0	[2013年01月18日] 掲載 [2013年02月21日] ベンダ情報：Ubuntu (USN-1703-1) を追加ベンダ情報：レッドハット (RHSA-2013:0219) を追加 [2013年11月08日] ベンダ情報：Gentoo Linux (GLSA 201308-06) を追加ベンダ情報：Mandriva, Inc. (MDVSA-2013:150) を追加	Feb. 17, 2018, 10:37 a.m.