PT-2012-3446 · Oracle+3 · Mysql Server+3

CVE-2012-1689 · Publicado 2012-07-17 · Atualizado 2022-08-26

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.1.62 and earlier Oracle MySQL Server versions 5.5.22 and earlier

Description The issue affects the availability of the system, related to the Server Optimizer component. It can be exploited by remote authenticated users via unknown vectors.

Recommendations For Oracle MySQL Server versions 5.1.62 and earlier, update to a version later than 5.1.62. For Oracle MySQL Server versions 5.5.22 and earlier, update to a version later than 5.5.22.

Correção

Identificadores relacionados

CESA-2012_1462

CVE-2012-1689

DSA-2496-1

RHSA-2012:1462

RHSA-2012_1462

Produtos afetados

Centos

Mariadb Server

Mysql Server

Red Hat

Referências · 60

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysql_authbypass_hashdump.rb · Nota
• https://lists.centos.org/pipermail/centos-announce/2012-November/055914.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3180 · Nota de Segurança
• http://osvdb.org/83980 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3166 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2122 · Nota de Segurança
• http://securityfocus.com/bid/53911 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3150 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3167 · Nota
• https://access.redhat.com/security/cve/CVE-2012-2749 · Nota
• https://mariadb.com/kb/en/mariadb-5-1-66-release-notes · Nota
• https://access.redhat.com/security/cve/CVE-2012-3158 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77065 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3158 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2012-November/031033.html · Nota