CVE-2012-4414

Disclaimer: This data contains information about vulnerable...

CVE-2012-4414

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to t...

mysql: acl_get() stack-based buffer overflow

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

CVE-2012-4414: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to t...

mariadb to 5.2.13 (important)

MariaDB was updated to 5.2.13. Release notes: http://kb.askmonty.org/v/mariadb-5213-release-notes Changelog: http://kb.askmonty.org/v/mariadb-5213-changelog...

mariadb to 5.5.28a (important)

MariaDB was updated to 5.5.28a, fixing bugs and security issues: Release notes: http://kb.askmonty.org/v/mariadb-5528a-release-notes http://kb.askmonty.org/v/mariadb-5528-release-notes http://kb.askmonty.org/v/mariadb-5527-release-notes Changelog: http://kb.askmonty.org/v/mariadb-5528a-changelog...

mysql any user password the probability of landing vulnerability-vulnerability warning-the black bar safety net

When connected to MariaDB/MySQL, enter the password with the desired correct password comparison, due to incorrect handling, cause even if the memcmpreturned a non-zero value, it will make MySQL think that the two passwords are the same. That is as long as you know the user name, continually try ...

Oracle MySQL/MariaDB 不安全Salt生成安全绕过漏洞(CVE-2012-5627)

Bugtraq ID:56837 CVE ID:CVE-2012-5627 MySQL是一款开源关系型数据库管理系统。MariaDB是一个采用Maria存储引擎的MySQL分支版本。 MySQL处理密码salt值存在漏洞，当用户登录MySQL时，会生成Salt值用于防止密码猜测攻击。此salt值在会话开始时创建并用于整个会话，如果通过验证的攻击者使用MySQL "changeuser"命令尝试以其他用户登录，由于Salt已知，可导致密码猜测更有效率。 0 MySQL 5.5.19及其他版本 MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66 MariaDB...

Mandriva Linux Security Advisory : mysql (MDVSA-2012:178)

A vulnerability was discovered and corrected in mysql : Stack-based buffer overflow in MySQL 5.5.19, 5.1.53, and possibly other versions, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary co...

Mandriva Update for mysql MDVSA-2012:178 (mysql)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

MariaDB Authentication Error Message User Enumeration Vulnerability

MariaDB is prone to a user enumeration vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb";...

Oracle MySQL MariaDB - Insecure Salt Generation Security Bypass

Oracle MySQL MariaDB - Insecure Salt Generation Security Bypass source: https://www.securityfocus.com/bid/56837/info MySQL and MariaDB are prone to a security-bypass weakness. An attacker may be able to exploit this issue to aid in brute-force attacks; other attacks may also be possible. use...

Oracle MySQL / MariaDB - Insecure Salt Generation Security Bypass

source: https://www.securityfocus.com/bid/56837/info MySQL and MariaDB are prone to a security-bypass weakness. An attacker may be able to exploit this issue to aid in brute-force attacks; other attacks may also be possible. use Net::MySQL; $|=1; my $mysql = Net::MySQL-new hostname = '192.168.2.3...

MariaDB 5.1.0 < 5.1.66 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.1.66. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.1.66 advisory. - Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through...

MariaDB 5.3.0 < 5.3.11

The version of MariaDB installed on the remote host is prior to 5.3.11. It is, therefore, affected by a vulnerability as referenced in the 5.3.11 advisory. - Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions...

MariaDB 5.2.0 < 5.2.13 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.2.13. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.2.13 advisory. - Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other...

MariaDB 5.5.0 < 5.5.28a

The version of MariaDB installed on the remote host is prior to 5.5.28a. It is, therefore, affected by a vulnerability as referenced in the 5.5.28a advisory. - Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other version...

Experts Downplay MySQL Database Zero-Days

A rash of zero-day exploits and vulnerabilities in the MySQL database were disclosed to the Full Disclosure mailing list over the weekend, but experts are saying they’re much ado about nothing. Of the half-dozen zero-days reported by a researcher known as King Cope, all but one require legitimate...

CVE-2012-5611

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

CVE-2012-5613

MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as...