Bug 952892 (CVE-2013-2381)

Summary:	CVE-2013-2381 mysql: unspecified vulnerability related to Server Privileges (CPU April 2013)
Product:	[Other] Security Response	Reporter:	Vincent Danen <vdanen>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	byte, extras-orphan, tgl
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-04-17 00:12:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	952846, 952853

Description Vincent Danen 2013-04-16 23:17:15 UTC

An unspecified vulnerability in the Server Privileges subcomponent of Oracle MySQL allows remote authenticated attackers to impact the integrity of the server via unspecified vectors.

This flaw affects MySQL 5.6.10 and earlier.

External References:

http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html#AppendixMSQL

Comment 1 Vincent Danen 2013-04-17 00:12:12 UTC

Statement:

Not vulnerable. This issue did not affect the versions of mysql as shipped with Red Hat Enterprise Linux 5 and 6.