{"id":"CVE-2013-0375","aliases":["DSA-2780-1","EUVD-2013-0386","GHSA-q3h3-3c8r-f8fp","RHSA-2013:0219"],"status":"published","title":"Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28...","description":"Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01917,"percentile":0.80001,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2013-01-17T01:30:00Z","modified":"2026-06-26T12:21:43Z","affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"mysql-5.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.72-2"}]}],"versions":["5.1.49-3","5.1.50-1","5.1.51-1","5.1.53-1","5.1.54-1","5.1.54-2","5.1.55-1","5.1.56-1","5.1.57-1","5.1.57-1.1","5.1.57-1.2","5.1.57-1.3","5.1.57-2","5.1.57-3","5.1.57-3.1","5.1.58-1","5.1.61-0+squeeze1","5.1.61-2","5.1.61-3","5.1.62-1","5.1.62-1+m68k","5.1.63-0+squeeze1","5.1.66-0+squeeze1"],"bundled":32},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.67-1.el6_3"}]}],"bundled":9}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"mariadb","product":"mariadb"},{"vendor":"oracle","product":"mysql"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-1703-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/53372","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201308-06.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0219.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17175","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0375","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q3h3-3c8r-f8fp"},{"url":"https://access.redhat.com/errata/RHSA-2013:0219","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html#AppendixMSQL","tags":["article"]},{"url":"http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-67.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896078","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0219.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0572","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0572","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0572","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0574","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0574","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0574","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-1702","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1702","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1702","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-1705","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1705","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1705","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0375","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0375","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0383","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0384","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0384","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0385","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0385","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0389","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0389","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0389","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-0375","description":"Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.","status":"published","published":"2013-01-17T01:30:00Z","modified":"2024-08-06T14:25:09.849Z","updated_at":"2026-11-02T14:34:59.551717Z"}],"euvd":[{"id":"EUVD-2013-0386","description":"Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.","status":"published","published":"2013-01-17T01:30:00Z","modified":"2024-08-06T14:25:09Z","updated_at":"2026-11-03T01:56:45.291032Z"}],"ghsa":[{"id":"GHSA-q3h3-3c8r-f8fp","title":"Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28...","description":"Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.","status":"published","published":"2022-05-05T02:48:53Z","modified":"2023-01-27T05:02:10Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:42:02.011098Z"}],"nvd":[{"id":"CVE-2013-0375","description":"Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.","status":"published","published":"2013-01-17T01:55:04.297Z","modified":"2026-06-16T23:49:19.61Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:21.222658Z"}],"osv":[{"id":"DSA-2780-1","title":"mysql-5.1 - several","status":"published","published":"2013-10-18T00:00:00Z","modified":"2026-03-09T01:20:17.858981Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"RHSA-2013:0219","title":"Red Hat Security Advisory: mysql security update","status":"published","published":"2024-09-15T20:33:11Z","modified":"2026-06-26T12:21:43.440855852Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}