PT-2012-4534 · Oracle+3 · Mysql Server+3

Publicado 2012-10-17 · Atualizado 2022-10-27 · CVE-2012-3167

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.1.63 and earlier MySQL Server versions 5.5.25 and earlier

Description The issue affects the availability of the system, allowing remote authenticated users to exploit it via unknown vectors related to Server Full Text Search.

Recommendations For MySQL Server versions 5.1.63 and earlier, update to a version later than 5.1.63. For MySQL Server versions 5.5.25 and earlier, update to a version later than 5.5.25.

Correção

Identificadores relacionados

CESA-2012_1462

CVE-2012-3167

DSA-2581-1

RHSA-2012:1462

RHSA-2012_1462

Produtos afetados

Centos

Mariadb Server

Mysql Server

Red Hat

Referências · 60

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysql_authbypass_hashdump.rb · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1703 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1734 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-2749 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3167 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1689 · Nota de Segurança
• http://debian.org/security/2012/dsa-2581 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3167 · Nota de Segurança
• https://mariadb.com/kb/en/mariadb-5-5-27-release-notes · Nota
• https://access.redhat.com/security/cve/CVE-2012-3158 · Nota
• http://secunia.com/advisories/51177 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3197 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3160 · Nota
• http://security.gentoo.org/glsa/glsa-201308-06.xml · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3163 · Nota de Segurança