CVE-2012-5611

Scores

EPSS

0.666medium66.6%
0%20%40%60%80%100%

Percentile: 66.6%

CVSS

6.5medium2.0
0246810

CVSS Score: 6.5/10

All CVSS Scores

CVSS 2.0
6.5

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdredhat

CWEs

CWE-119CWE-121

Exploits

Exploit ID: 23075

Source: exploitdb

URL: https://www.exploit-db.com/exploits/23075

Recommendations

Source: nvd

Before applying this update, make sure all previously-released erratarelevant to your system have been applied.
This update is available via the Red Hat Network. Details on how touse the Red Hat Network to apply this update are available athttps://access.redhat.com/knowledge/articles/11258

URL: http://rhn.redhat.com/errata/RHSA-2013-0180.html

Source: nvd

Before applying this update, make sure all previously-released erratarelevant to your system have been applied.
This update is available via the Red Hat Network. Details on how touse the Red Hat Network to apply this update are available athttps://access.redhat.com/knowledge/articles/11258

URL: http://rhn.redhat.com/errata/RHSA-2012-1551.html

Vulnerable Software (6)

Type: Configuration

Product: mysql

Operating System: rhel 5

Trait:
{  "fixed": "5.0.95-5.el5_9"}

Source: redhat

Type: Configuration

Product: mysql

Operating System: rhel 6

Trait:
{  "fixed": "5.1.66-2.el6_3"}

Source: redhat

Type: Configuration

Product: mysql-5.1

Operating System: debian

Trait:
{  "unfixed": true}

Source: debian

Type: Configuration

Product: mysql-5.5

Operating System: debian

Trait:
{  "fixed": "5.5.29+dfsg-1"}

Source: debian

Type: Configuration

Vendor: *

Product: mariadb

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:mariadb:mariadb:5.1.41:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "...

Source: nvd

Type: Configuration

Vendor: *

Product: mysql

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:mariadb:mariadb:5.1.41:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "...

Source: nvd

End of list