PT-2012-4536 · Oracle+3 · Mysql Server+3

Publicado 2012-10-17 · Atualizado 2023-01-24 · CVE-2012-3173

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.1.63 and earlier MySQL Server versions 5.5.25 and earlier

Description The issue allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin.

Recommendations For MySQL Server versions 5.1.63 and earlier, update to a version later than 5.1.63. For MySQL Server versions 5.5.25 and earlier, update to a version later than 5.5.25.

Correção

Identificadores relacionados

CESA-2012_1462

CVE-2012-3173

DSA-2581-1

RHSA-2012:1462

RHSA-2012_1462

Produtos afetados

Centos

Mariadb Server

Mysql Server

Red Hat

Referências · 61

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysql_authbypass_hashdump.rb · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1703 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1734 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-2749 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3167 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1689 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79386 · Nota
• http://debian.org/security/2012/dsa-2581 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3167 · Nota de Segurança
• https://mariadb.com/kb/en/mariadb-5-5-27-release-notes · Nota
• https://access.redhat.com/security/cve/CVE-2012-3158 · Nota
• http://secunia.com/advisories/51177 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3197 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3160 · Nota
• http://security.gentoo.org/glsa/glsa-201308-06.xml · Aviso do Fabricante