CVE

Id
58870  
CVE No.
CVE-2012-5627  
Status
Candidate  
Description
Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602105 58870 CVE-2012-5627 FULLDISC:20121203 MySQL Local/Remote FAST Account Password Cracking  View
602106 58870 CVE-2012-5627 URL:http://seclists.org/fulldisclosure/2012/Dec/58  View
602107 58870 CVE-2012-5627 FULLDISC:20121205 Re: MySQL Local/Remote FAST Account Password Cracking  View
602108 58870 CVE-2012-5627 URL:http://seclists.org/fulldisclosure/2012/Dec/83  View
602109 58870 CVE-2012-5627 MLIST:[oss-security] 20121206 Re: CVE request: Mysql/Mariadb insecure salt-usage  View
602110 58870 CVE-2012-5627 URL:http://seclists.org/oss-sec/2012/q4/424  View
602111 58870 CVE-2012-5627 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=883719  View
602112 58870 CVE-2012-5627 CONFIRM:https://mariadb.atlassian.net/browse/MDEV-3915  View
602113 58870 CVE-2012-5627 GENTOO:GLSA-201308-06  View
602114 58870 CVE-2012-5627 URL:http://security.gentoo.org/glsa/glsa-201308-06.xml  View
602115 58870 CVE-2012-5627 MANDRIVA:MDVSA-2013:102  View
602116 58870 CVE-2012-5627 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:102  View
602117 58870 CVE-2012-5627 SECUNIA:53372  View

Related JVN