Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mariadb: password brute-force vulnerability

Package(s):

mariadb

CVE #(s):

CVE-2012-5627

Created:

February 10, 2013

Updated:

February 13, 2013

Description:

The mariadb COM_CHANGE_USER operation fails to abort the session when an incorrect password is supplied, enabling many passwords to be tried in quick succession.

Alerts:

Mageia

MGASA-2013-0046

2013-02-09

(Log in to post comments)