CVE-2012-5611

Опубликовано: 03 дек. 2012

Источник: nvd

CVSS2: 6.5

EPSS Средний

Описание

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.

Комментарий

per http://www.openwall.com/lists/oss-security/2012/12/02/3, this vulnerability is only on linux-based software installations

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1551.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0180.html
Third Party Advisory
http://seclists.org/fulldisclosure/2012/Dec/4
Mailing List
Third Party Advisory
http://secunia.com/advisories/51443
Broken Link
http://secunia.com/advisories/53372
Broken Link
http://security.gentoo.org/glsa/glsa-201308-06.xml
Third Party Advisory
http://www.debian.org/security/2012/dsa-2581
Third Party Advisory
http://www.exploit-db.com/exploits/23075
Third Party Advisory
VDB Entry
http://www.mandriva.com/security/advisories?name=MDVSA-2013:102
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/12/02/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/12/02/4
Mailing List
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:mariadb:mariadb:5.1.41:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.42:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.44:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.47:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.49:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.50:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.51:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.53:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.55:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.60:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.61:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.1.62:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.2:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.3:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.4:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.5:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.6:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.7:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.8:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.9:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.10:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.11:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.2.12:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.0:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.3:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.4:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.5:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.6:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.7:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.8:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.9:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.3.10:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.5.20:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.5.21:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.5.22:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.5.23:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.5.24:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.5.25:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.5.27:*:*:*:*:*:*:*

cpe:2.3:a:mariadb:mariadb:5.5.28:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:5.1.53:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.46532

Средний

6.5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2012-5611

ubuntu

больше 12 лет назад

CVE-2012-5611

redhat

больше 12 лет назад

CVE-2012-5611

debian

больше 12 лет назад

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5. ...

GHSA-gcrp-g698-23xq

github

около 3 лет назад

ELSA-2012-1551

oracle-oval

больше 12 лет назад

ELSA-2012-1551: mysql security update (IMPORTANT)

EPSS

Процентиль: 98%

0.46532

Средний

6.5 Medium

CVSS2

Дефекты

CWE-119