PT-2012-4539 · Mysql Server+3 · Mysql Server+3

Publicado 2012-10-17 · Atualizado 2022-07-01 · CVE-2012-3177

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.1.65 and earlier MySQL Server versions 5.5.27 and earlier

Description The issue affects the availability of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Server component.

Recommendations For MySQL Server versions 5.1.65 and earlier, update to a version later than 5.1.65. For MySQL Server versions 5.5.27 and earlier, update to a version later than 5.5.27.

Correção

Identificadores relacionados

CESA-2012_1462

CVE-2012-3177

DSA-2581-1

RHSA-2012:1462

RHSA-2012_1462

Produtos afetados

Centos

Mariadb Server

Mysql Server

Red Hat

Referências · 61

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysql_authbypass_hashdump.rb · Nota
• https://lists.centos.org/pipermail/centos-announce/2012-November/055914.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3180 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2012-3166 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2122 · Nota de Segurança
• http://securityfocus.com/bid/53911 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3150 · Nota
• https://access.redhat.com/security/cve/CVE-2012-3167 · Nota
• https://access.redhat.com/security/cve/CVE-2012-2749 · Nota
• https://mariadb.com/kb/en/mariadb-5-1-66-release-notes · Nota
• https://access.redhat.com/security/cve/CVE-2012-3158 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3158 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2012-November/031033.html · Nota
• https://access.redhat.com/security/cve/CVE-2012-3163 · Nota
• http://rhn.redhat.com/errata/RHSA-2012-1462.html · Aviso do Fabricante