Back to Database
Status published
Medium
CVE-2012-5615
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB...
Vulnerability Description
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-5615
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:102
- http://secunia.com/advisories/53372
- http://www.openwall.com/lists/oss-security/2012/12/02/3
- http://seclists.org/fulldisclosure/2012/Dec/9
- http://security.gentoo.org/glsa/glsa-201308-06.xml
- http://www.openwall.com/lists/oss-security/2012/12/02/4
- https://mariadb.atlassian.net/browse/MDEV-3909
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html
- http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
More from mariadb
View All →CVE-2022-47015
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial...
Unknown
0
CVE-2022-38791
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release...
Medium
5.5
CVE-2022-32091
MariaDB v10.7 was discovered to contain an use-after-poison in in...
High
7.5
CVE-2022-32089
MariaDB v10.5 to v10.7 was discovered to contain a segmentation...
High
7.5
CVE-2022-32088
MariaDB v10.2 to v10.7 was discovered to contain a segmentation...
High
7.5
Affected Vendor
mariadb
View all reports →Affected Software
mariadb, mysql
Vulnerable Versions:
5.1.66, 5.2.13, 5.3.11, 5.5.28a, 5.5.19
Timeline
Official Publish:
December 3rd, 2012
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.