CVE-2012-5611

EUVD-2012-5497
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Affected Products (NVD)
VendorProductVersion
mariadbmariadb
5.1.41
mariadbmariadb
5.1.42
mariadbmariadb
5.1.44
mariadbmariadb
5.1.47
mariadbmariadb
5.1.49
mariadbmariadb
5.1.50
mariadbmariadb
5.1.51
mariadbmariadb
5.1.53
mariadbmariadb
5.1.55
mariadbmariadb
5.1.60
mariadbmariadb
5.1.61
mariadbmariadb
5.1.62
mariadbmariadb
5.2.0
mariadbmariadb
5.2.1
mariadbmariadb
5.2.2
mariadbmariadb
5.2.3
mariadbmariadb
5.2.4
mariadbmariadb
5.2.5
mariadbmariadb
5.2.6
mariadbmariadb
5.2.7
mariadbmariadb
5.2.8
mariadbmariadb
5.2.9
mariadbmariadb
5.2.10
mariadbmariadb
5.2.11
mariadbmariadb
5.2.12
mariadbmariadb
5.3.0
mariadbmariadb
5.3.1
mariadbmariadb
5.3.2
mariadbmariadb
5.3.3
mariadbmariadb
5.3.4
mariadbmariadb
5.3.5
mariadbmariadb
5.3.6
mariadbmariadb
5.3.7
mariadbmariadb
5.3.8
mariadbmariadb
5.3.9
mariadbmariadb
5.3.10
mariadbmariadb
5.5.20
mariadbmariadb
5.5.21
mariadbmariadb
5.5.22
mariadbmariadb
5.5.23
mariadbmariadb
5.5.24
mariadbmariadb
5.5.25
mariadbmariadb
5.5.27
mariadbmariadb
5.5.28
oraclemysql
5.1.53
oraclemysql
5.5.19
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mysql-5.1
hardy
dne
lucid
dne
oneiric
Fixed 5.1.66-0ubuntu0.11.10.3
released
precise
dne
quantal
dne
mysql-5.5
hardy
dne
lucid
dne
oneiric
dne
precise
Fixed 5.5.28-0ubuntu0.12.04.3
released
quantal
Fixed 5.5.28-0ubuntu0.12.10.2
released
mysql-dfsg-5.1
hardy
dne
lucid
Fixed 5.1.66-0ubuntu0.10.04.3
released
oneiric
dne
precise
dne
quantal
dne
References