Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language, a different vulnerability than CVE-2013-1567.

The remote host is affected by the vulnerability described in GLSA-201308-06 (MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MySQL. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send a specially crafted request, possibly       resulting in execution of arbitrary code with the privileges of the       application or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The version of MySQL 5.6 installed on the remote host is earlier than 5.6.11. Therefore, affected by vulnerabilities in the following components :

  - Data Manipulation Language

  - Information Schema

  - InnoDB

  - MemCached

  - Server Install

  - Server Locking

  - Server Optimizer

  - Server Partition

  - Server Privileges

  - Server Procedure

  - Prepared Statements

The version of MySQL installed on the remote host is 5.6.x older than 5.6.11.  As such, it is reportedly affected by vulnerabilities in the following components :

  - Data Manipulation Language
  - Information Schema
  - InnoDB
  - MemCached
  - Prepared Statements
  - Server Install
  - Server Locking
  - Server Options
  - Server Optimizer
  - Server Partition
  - Server Privileges
  - Stored Procedure

ID	Name	Product	Family	Type	Severity
69508	GLSA-201308-06 : MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	medium
6768	Oracle MySQL Server 5.6.x < 5.6.11 Multiple Vulnerabilities	Nessus Network Monitor	Database		medium
66179	MySQL 5.6.x < 5.6.11 Multiple Vulnerabilities	Nessus	Databases	Remote	medium

Detections

Analytics

CVE-2013-2395

medium

Tenable Plugins

medium

medium

medium