CVE-2013-0375

Published: 16 January 2013

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.

Priority

Medium

CVSS 3 base score: 6.4

Status

Notes

mysql-cluster-7.0 not supported per Ubuntu Server team
As of 2012/01/09, Oracle no longer supports MySQL 5.0.
Unfortunately, because of upstream update and commit policies it is not
possible to backport patches from later releases. Ubuntu is regrettably
unable to support MySQL 5.0 and users are encouraged to upgrade to Ubuntu
10.04 LTS or later.

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0375
• http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
• https://ubuntu.com/security/notices/USN-1703-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1100264