Rapid7 Vulnerability & Exploit Database

ELSA-2012-1551 Important: Oracle Linux mysql security update

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

ELSA-2012-1551 Important: Oracle Linux mysql security update

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:P/A:P)

Published

12/03/2012

Created

07/25/2018

Added

12/14/2012

Modified

07/04/2017

Description

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.

Solution(s)

oracle-linux-upgrade-mysql
oracle-linux-upgrade-mysql-bench
oracle-linux-upgrade-mysql-devel
oracle-linux-upgrade-mysql-embedded
oracle-linux-upgrade-mysql-embedded-devel
oracle-linux-upgrade-mysql-libs
oracle-linux-upgrade-mysql-server
oracle-linux-upgrade-mysql-test

References

https://attackerkb.com/topics/cve-2012-5611
CVE - 2012-5611
DSA-2581
OVAL16395
RHSA-2012:1551
RHSA-2013:0180
http://oss.oracle.com/pipermail/el-errata/2012-December/003164.html

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;