Servers and applications
CVE-2013-0385
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users to affect confidentiality and integrity via unknown vectors related to Server Replication.
- Severity
- Medium 6.6
- Published
- 17 Jan 2013
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 17 Oct 2026
- Fixed in
- 5.1.67, 5.2.14, 5.3.12, 5.5.29
- Exploit chance
- 0.4% in the next 30 daysHigher than 37% of CVEs. EPSS by FIRST, 12 Nov 2026
- Attack
- Needs local access · No login needed
- Attacker can
- Read data · Change data
- CVSS vector
AV:L/AC:L/Au:N/C:C/I:C/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MariaDBServers and applications · cpe:a:mariadb:mariadb |
|
MySQLServers and applications · cpe:a:oracle:mysql |
|