CVE-2015-3152 - Improper Access Control

Severity

43%

Complexity

86%

Confidentiality

48%

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

CVSS 3.0 Base Score 5.9. CVSS Attack Vector: network. CVSS Attack Complexity: high. CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:P/A:N).

Overview

First reported 9 years ago

2016-05-16 10:59:00

Last updated 6 years ago

2018-10-09 19:56:00

Affected Software

Oracle MySQL -

References

FEDORA-2015-10849

FEDORA-2015-10831

http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/

http://mysqlblog.fivefarmers.com/2015/04/29/ssltls-in-5-6-and-5-5-ocert-advisory/

Vendor Advisory

http://packetstormsecurity.com/files/131688/MySQL-SSL-TLS-Downgrade.html

RHSA-2015:1646

RHSA-2015:1647

RHSA-2015:1665

DSA-3311

http://www.ocert.org/advisories/ocert-2015-003.html

Vendor Advisory

20150429 [oCERT-2015-003] MySQL SSL/TLS downgrade

74398

1032216

https://access.redhat.com/security/cve/cve-2015-3152

https://github.com/mysql/mysql-server/commit/3bd5589e1a5a93f9c224badf983cd65c45215390

https://jira.mariadb.org/browse/MDEV-7937

Vendor Advisory

https://www.duosecurity.com/blog/backronym-mysql-vulnerability

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.