PT-2015-6079 · Oracle+5 · Mysql Server+7

Adam Goodman · Published 2015-06-11 · Updated 2024-06-15 · CVE-2015-3152

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions prior to 5.7.3 Oracle MySQL Connector/C (aka libmysqlclient) versions prior to 6.1.3 MariaDB versions prior to 5.5.44

Description The issue allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack. This is due to the --ssl option being used to mean that SSL is optional.

Recommendations For Oracle MySQL versions prior to 5.7.3, update to version 5.7.3 or later to resolve the issue. For Oracle MySQL Connector/C (aka libmysqlclient) versions prior to 6.1.3, update to version 6.1.3 or later to resolve the issue. For MariaDB versions prior to 5.5.44, update to version 5.5.44 or later to resolve the issue.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

ALT-PU-2015-1749

ALT-PU-2018-1647

CESA-2015_1665

CVE-2015-3152

DSA-3311-1

MGASA-2015-0279

OPENSUSE-SU-2015_1216-1

OPENSUSE-SU-2015_2243-1

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2015:1646

RHSA-2015:1647

RHSA-2015:1665

RHSA-2015_1665

SUSE-SU-2015:1273-1

SUSE-SU-2015:1788-1

SUSE-SU-2016:1638-1

Affected Products

Alt Linux

Centos

Mariadb

Mariadb Server

Mysql Server

Mysql Connector/J

Red Hat

Suse

References · 343

• 🔥 https://github.com/duo-labs/mysslstrip · Exploit
• 🔥 https://github.com/OsandaMalith/CVE-2015-4870 · Exploit
• 🔥 http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option · Exploit
• https://github.com/mysql/mysql-server/commit/3bd5589e1a5a93f9c224badf983cd65c45215390 · Patch
• https://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10290-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3311-1 · Vendor Advisory
• http://ocert.org/advisories/ocert-2015-003.html · Vendor Advisory
• http://debian.org/security/2015/dsa-3311 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1646.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1665.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0279.html · Security Note
• https://ubuntu.com/security/CVE-2015-3152 · Vendor Advisory