Approved changes feed: RSS · Atom

cpe:2.3:a:mariadb:mariadb:5.1.66:*:*:*:*:*:*:*

part: a version: 5.1.66 update: *

VendorMariadb (7f603b14-ed39-5458-877b-2a349be64aa8)
ProductMariadb (f53ad24a-fa82-58e9-8aea-d11d98960d9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mariadb-server purl2cpe 2026-06-01 10:16:17.613206
pkg:deb/ubuntu/mariadb-server purl2cpe 2026-06-01 10:16:17.613208
pkg:docker/mariadb/mariadb-docker purl2cpe 2026-06-01 10:16:17.613209
pkg:docker/mariadb/server purl2cpe 2026-06-01 10:16:17.613210
pkg:github/mariadb/server purl2cpe 2026-06-01 10:16:17.613212
pkg:rpm/fedora/mariadb purl2cpe 2026-06-01 10:16:17.613213
pkg:rpm/opensuse/mariadb purl2cpe 2026-06-01 10:16:17.613214

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5615 vulnerable 2026-06-08 05:02:57.550835 Details available
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
Published: 2012-12-03T11:00:00.000Z
Updated: 2024-08-06T21:14:15.987Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.