PT-2012-6058 · Mariadb+4 · Mariadb+5

Huzaifa Sidhpurwala · Published 2012-11-29 · Updated 2024-06-15 · CVE-2012-5611

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.1.53 through 5.1.66 Oracle MySQL versions 5.5.19 through 5.5.28 MariaDB versions 5.1.x through 5.1.66 MariaDB versions 5.2.x through 5.2.13 MariaDB versions 5.3.x through 5.3.11 MariaDB versions 5.5.2.x through 5.5.28a

Description The issue is a stack-based buffer overflow in the acl get function, allowing remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.

Recommendations For Oracle MySQL versions 5.1.53 through 5.1.66, update to a version later than 5.1.66. For Oracle MySQL versions 5.5.19 through 5.5.28, update to a version later than 5.5.28. For MariaDB versions 5.1.x through 5.1.66, update to a version later than 5.1.66. For MariaDB versions 5.2.x through 5.2.13, update to a version later than 5.2.13. For MariaDB versions 5.3.x through 5.3.11, update to a version later than 5.3.11. For MariaDB versions 5.5.2.x through 5.5.28a, update to a version later than 5.5.28a.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CESA-2012_1551

CVE-2012-5611

DSA-2581-1

OPENSUSE-SU-2013_0011-1

OPENSUSE-SU-2013_0013-1

OPENSUSE-SU-2013_0014-1

OPENSUSE-SU-2013_0135-1

OPENSUSE-SU-2013_0156-1

OPENSUSE-SU-2024:10153-1

RHSA-2012:1551

RHSA-2012_1551

RHSA-2013:0180

RHSA-2013_0180

SUSE-RU-2023:3956-1

SUSE-RU-2023:4991-1

SUSE-SU-2013_0262-1

Affected Products

Centos

Mariadb

Mariadb Server

Mysql Server

Red Hat

Suse

References · 511

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mysql/mysql_start_up.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mysql/mysql_mof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/23075 · Exploit
• 🔥 http://exploit-db.com/exploits/23075 · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5612 · Security Note
• http://debian.org/security/2012/dsa-2581 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201308-06.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615 · Security Note
• http://ubuntu.com/usn/USN-1703-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2023:3956-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-5611 · Security Note
• https://osv.dev/vulnerability/SUSE-RU-2023:4991-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5611 · Security Note