PT-2012-4530 · Mysql Server+3 · Mysql Server+3

Publicado 2012-10-17 · Atualizado 2022-06-27 · CVE-2012-3163

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.1.64 and earlier MySQL Server versions 5.5.26 and earlier

Description The issue affects confidentiality, integrity, and availability. It is related to Information Schema, but the specific vectors are unknown.

Recommendations For MySQL Server versions 5.1.64 and earlier, update to a version later than 5.1.64. For MySQL Server versions 5.5.26 and earlier, update to a version later than 5.5.26.

Correção

Identificadores relacionados

CESA-2012_1462

CVE-2012-3163

DSA-2581-1

RHSA-2012:1462

RHSA-2012_1462

Produtos afetados

Centos

Mariadb Server

Mysql Server

Red Hat

Referências · 63

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysql_authbypass_hashdump.rb · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1703 · Nota de Segurança
• http://secunia.com/advisories/56513 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1734 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpuoct2012-1515893.html · Correção
• https://access.redhat.com/security/cve/CVE-2012-2749 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3167 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1689 · Nota de Segurança
• http://debian.org/security/2012/dsa-2581 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3167 · Nota de Segurança
• https://mariadb.com/kb/en/mariadb-5-5-27-release-notes · Nota
• https://access.redhat.com/security/cve/CVE-2012-3158 · Nota
• http://secunia.com/advisories/51177 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3197 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3160 · Nota