CVE-2013-0389

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

Published Bysecalert_us@oracle.com

Published DateJan 17, 2013, 01:55

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

6.8

Vector String

AV:N/AC:L/Au:S/C:N/I:N/A:C

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

COMPLETE

References

http://rhn.redhat.com/errata/RHSA-2013-0219.html
http://secunia.com/advisories/53372
http://security.gentoo.org/glsa/glsa-201308-06.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
http://www.ubuntu.com/usn/USN-1703-1
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16825

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

6.8

Vector String

AV:N/AC:L/Au:S/C:N/I:N/A:C

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

COMPLETE