Input validation error in MySQL Server - CVE-2013-5807

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU33864

Input validation error in MySQL Server - CVE-2013-5807

Published: October 16, 2013 / Updated: August 4, 2020


Vulnerability identifier: #VU33864
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2013-5807
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote #AU# to read and manipulate data.

Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Replication.


Affected software

MySQL Server
mysql (Alpine package)

How to mitigate CVE-2013-5807

Install update from vendor's website.

MySQL Server - update to 5.5.32
mysql (Alpine package) - update to 5.5.35-r0

External References

Related Security Bulletins