CVE-2012-5611

2012-12-0312:49:00

CWE-119

[email protected]

web.nvd.nist.gov

120

cve-2012-5611

buffer overflow

mysql

mariadb

nvd

security

vulnerability

code execution

5.6 Medium

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.

CPENameOperatorVersion
mariadb:mariadbmariadbeq5.1.41
mariadb:mariadbmariadbeq5.1.42
mariadb:mariadbmariadbeq5.1.44
mariadb:mariadbmariadbeq5.1.47
mariadb:mariadbmariadbeq5.1.49
mariadb:mariadbmariadbeq5.1.50
mariadb:mariadbmariadbeq5.1.51
mariadb:mariadbmariadbeq5.1.53
mariadb:mariadbmariadbeq5.1.55
mariadb:mariadbmariadbeq5.1.60

CPE	Name	Operator	Version
mariadb:mariadb	mariadb	eq	5.1.41
mariadb:mariadb	mariadb	eq	5.1.42
mariadb:mariadb	mariadb	eq	5.1.44
mariadb:mariadb	mariadb	eq	5.1.47
mariadb:mariadb	mariadb	eq	5.1.49
mariadb:mariadb	mariadb	eq	5.1.50
mariadb:mariadb	mariadb	eq	5.1.51
mariadb:mariadb	mariadb	eq	5.1.53
mariadb:mariadb	mariadb	eq	5.1.55
mariadb:mariadb	mariadb	eq	5.1.60