| From the Debian and Ubuntu bug reports:
CVE-2013-2162: The file "/etc/mysql/debian.cnf", which contains plain text credentials
for the "debian-sys-maint" mysql user, is created in an insecure manner
during the package installation phase. This can lead a non-privileged
local user to disclose its content and use this special account to
perform administration tasks.
CVE-2013-3783: Unspecified vulnerability in the MySQL Server component in Oracle MySQL
5.5.31 and earlier allows remote authenticated users to affect availability
via unknown vectors related to Server Parser.
CVE-2013-3793: Unspecified vulnerability in the MySQL Server component in Oracle MySQL
5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users
to affect availability via unknown vectors related to Data Manipulation
Language.
CVE-2013-3809: Unspecified vulnerability in the MySQL Server component in Oracle MySQL
5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users
to affect integrity via unknown vectors related to Audit Log.
CVE-2013-3812: Unspecified vulnerability in the MySQL Server component in Oracle MySQL
5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users
to affect availability via unknown vectors related to Server Replication. |