The version of MariaDB installed on the remote host is prior to 10.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mariadb-10-0-3-release-notes advisory.

  - Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.9 and earlier allows local users to     affect availability via unknown vectors related to Server Partition. (CVE-2013-1502)

  - Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote     authenticated users to affect availability via unknown vectors related to InnoDB. (CVE-2013-1511)

  - Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier     allows remote authenticated users to affect availability via unknown vectors related to Information     Schema. (CVE-2013-1532)

  - Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier     allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation     Language. (CVE-2013-1544)

  - Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier     allows remote authenticated users to affect confidentiality, integrity, and availability via unknown     vectors. (CVE-2013-2375)

  - Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote     authenticated users to affect availability via unknown vectors related to Stored Procedure.
    (CVE-2013-2376)

  - Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier     allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
    (CVE-2013-2389)

  - Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier     allows local users to affect confidentiality and integrity via unknown vectors related to Server Install.
    (CVE-2013-2391)

  - Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier     allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
    (CVE-2013-2392)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10     allows remote authenticated users to affect availability via unknown vectors related to Server Partition.
    (CVE-2013-3794)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10     allows remote authenticated users to affect availability via unknown vectors related to Server Options.
    (CVE-2013-3801)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10     allows remote authenticated users to affect availability via unknown vectors related to Prepared     Statements. (CVE-2013-3805)

  - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and earlier, 5.5.30 and     earlier, and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related     to Server Options. (CVE-2013-3808)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MariaDB 10.0.0 < 10.0.3 Multiple Vulnerabilities

high Nessus Plugin ID 167873

Version 1.4

Version 1.3

Version 1.2

Version 1.2

Version 1.4 Dec 26, 2023, 2:33 PM CVSSv3 score source (changed from "CVE-2013-3801" to "CVE-2013-3808") Plugin Feed: 202312261433
Version 1.3 Dec 14, 2023, 4:32 PM CVSSv3 score source (changed from "CVE-2013-3808" to "CVE-2013-3801") Plugin Feed: 202312141632
Version 1.2 Nov 18, 2022, 3:43 PM New Plugin Feed: 202211181543
Version 1.2 Dec 14, 2023, 2:28 PM CVSSv3 score source (changed from "CVE-2013-3808" to "CVE-2013-3801") Plugin Feed: 202312141428