CVE-2012-0490: Medium severity mysql vulnerability

Published Jan 18, 2012

Updated

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.

Affected Software

145 affected components

MySQL mysql=5.1.5

MySQL mysql=5.1.23

MySQL mysql=5.1.31

MySQL mysql=5.1.32

MySQL mysql=5.1.34

MySQL mysql=5.1.37

Oracle MySQL=5.1

Oracle MySQL=5.1.1

Oracle MySQL=5.1.2

Oracle MySQL=5.1.3

Oracle MySQL=5.1.4

Oracle MySQL=5.1.6

Oracle MySQL=5.1.7

Oracle MySQL=5.1.8

Oracle MySQL=5.1.9

Oracle MySQL=5.1.10

Oracle MySQL=5.1.11

Oracle MySQL=5.1.12

Oracle MySQL=5.1.13

Oracle MySQL=5.1.14

Oracle MySQL=5.1.15

Oracle MySQL=5.1.16

Oracle MySQL=5.1.17

Oracle MySQL=5.1.18

Oracle MySQL=5.1.19

Oracle MySQL=5.1.20

Oracle MySQL=5.1.21

Oracle MySQL=5.1.22

Oracle MySQL=5.1.23-a

Oracle MySQL=5.1.24

Oracle MySQL=5.1.25

Oracle MySQL=5.1.26

Oracle MySQL=5.1.27

Oracle MySQL=5.1.28

Oracle MySQL=5.1.29

Oracle MySQL=5.1.30

Oracle MySQL=5.1.31-sp1

Oracle MySQL=5.1.33

Oracle MySQL=5.1.34-sp1

Oracle MySQL=5.1.35

Oracle MySQL=5.1.36

Oracle MySQL=5.1.37-sp1

Oracle MySQL=5.1.38

Oracle MySQL=5.1.39

Oracle MySQL=5.1.40

Oracle MySQL=5.1.40-sp1

Oracle MySQL=5.1.41

Oracle MySQL=5.1.42

Oracle MySQL=5.1.43

Oracle MySQL=5.1.43-sp1

Oracle MySQL=5.1.44

Oracle MySQL=5.1.45

Oracle MySQL=5.1.46

Oracle MySQL=5.1.46-sp1

Oracle MySQL=5.1.47

Oracle MySQL=5.1.48

Oracle MySQL=5.1.49

Oracle MySQL=5.1.49-sp1

Oracle MySQL=5.1.50

Oracle MySQL=5.1.51

Oracle MySQL=5.1.52

Oracle MySQL=5.1.52-sp1

Oracle MySQL=5.1.53

Oracle MySQL=5.1.54

Oracle MySQL=5.1.55

Oracle MySQL=5.1.56

Oracle MySQL=5.1.57

Oracle MySQL=5.1.58

Oracle MySQL=5.1.59

Oracle MySQL=5.1.60

Oracle MySQL=5.1.61

Oracle MySQL=5.5.0

Oracle MySQL=5.5.1

Oracle MySQL=5.5.2

Oracle MySQL=5.5.3

Oracle MySQL=5.5.4

Oracle MySQL=5.5.5

Oracle MySQL=5.5.6

Oracle MySQL=5.5.7

Oracle MySQL=5.5.8

Oracle MySQL=5.5.9

Oracle MySQL=5.5.10

Oracle MySQL=5.5.11

Oracle MySQL=5.5.12

Oracle MySQL=5.5.13

Oracle MySQL=5.5.14

Oracle MySQL=5.5.15

Oracle MySQL=5.5.16

Oracle MySQL=5.5.17

Oracle MySQL=5.5.18

Oracle MySQL=5.5.19

Oracle MySQL=5.5.20

Oracle MySQL=5.5.21

MySQL mysql=5.0.0

MySQL mysql=5.0.1

MySQL mysql=5.0.2

MySQL mysql=5.0.3

MySQL mysql=5.0.4

MySQL mysql=5.0.5

MySQL mysql=5.0.5.0.21

MySQL mysql=5.0.10

MySQL mysql=5.0.15

MySQL mysql=5.0.16

MySQL mysql=5.0.17

MySQL mysql=5.0.20

MySQL mysql=5.0.22.1.0.1

MySQL mysql=5.0.24

MySQL mysql=5.0.30

MySQL mysql=5.0.36

MySQL mysql=5.0.44

MySQL mysql=5.0.45-b

MySQL mysql=5.0.45b

MySQL mysql=5.0.54

MySQL mysql=5.0.56

MySQL mysql=5.0.60

MySQL mysql=5.0.66

MySQL mysql=5.0.82

MySQL mysql=5.0.84

MySQL mysql=5.0.87

Oracle MySQL=5.0.23

Oracle MySQL=5.0.25

Oracle MySQL=5.0.26

Oracle MySQL=5.0.30-sp1

Oracle MySQL=5.0.32

Oracle MySQL=5.0.38

Oracle MySQL=5.0.41

Oracle MySQL=5.0.42

Oracle MySQL=5.0.45

Oracle MySQL=5.0.50

Oracle MySQL=5.0.51

Oracle MySQL=5.0.52

Oracle MySQL=5.0.67

Oracle MySQL=5.0.75

Oracle MySQL=5.0.77

Oracle MySQL=5.0.81

Oracle MySQL=5.0.83

Oracle MySQL=5.0.85

Oracle MySQL=5.0.86

Oracle MySQL=5.0.88

Oracle MySQL=5.0.89

Oracle MySQL=5.0.90

Oracle MySQL=5.0.91

Oracle MySQL=5.0.92

Oracle MySQL=5.0.93

Oracle MySQL=5.0.94

Event History

Jan 18, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0490?

CVE-2012-0490 has a moderate severity rating that could lead to availability issues for remote authenticated users.

How do I fix CVE-2012-0490?

To fix CVE-2012-0490, you should upgrade to MySQL versions that do not suffer from this vulnerability, such as the latest 5.1.x or 5.5.x releases.

What versions of MySQL are affected by CVE-2012-0490?

CVE-2012-0490 affects MySQL Server versions 5.0.x, 5.1.x, and 5.5.x.

Can CVE-2012-0490 be exploited remotely?

Yes, CVE-2012-0490 can be exploited by remote authenticated users, potentially impacting service availability.

Is CVE-2012-0490 a critical vulnerability?

CVE-2012-0490 is not classified as critical; rather, it poses a moderate risk regarding the availability of affected MySQL services.