CVE-2012-5611

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
mariadbmariadb
5.1.41
mariadbmariadb
5.1.42
mariadbmariadb
5.1.44
mariadbmariadb
5.1.47
mariadbmariadb
5.1.49
mariadbmariadb
5.1.50
mariadbmariadb
5.1.51
mariadbmariadb
5.1.53
mariadbmariadb
5.1.55
mariadbmariadb
5.1.60
mariadbmariadb
5.1.61
mariadbmariadb
5.1.62
mariadbmariadb
5.2.0
mariadbmariadb
5.2.1
mariadbmariadb
5.2.2
mariadbmariadb
5.2.3
mariadbmariadb
5.2.4
mariadbmariadb
5.2.5
mariadbmariadb
5.2.6
mariadbmariadb
5.2.7
mariadbmariadb
5.2.8
mariadbmariadb
5.2.9
mariadbmariadb
5.2.10
mariadbmariadb
5.2.11
mariadbmariadb
5.2.12
mariadbmariadb
5.3.0
mariadbmariadb
5.3.1
mariadbmariadb
5.3.2
mariadbmariadb
5.3.3
mariadbmariadb
5.3.4
mariadbmariadb
5.3.5
mariadbmariadb
5.3.6
mariadbmariadb
5.3.7
mariadbmariadb
5.3.8
mariadbmariadb
5.3.9
mariadbmariadb
5.3.10
mariadbmariadb
5.5.20
mariadbmariadb
5.5.21
mariadbmariadb
5.5.22
mariadbmariadb
5.5.23
mariadbmariadb
5.5.24
mariadbmariadb
5.5.25
mariadbmariadb
5.5.27
mariadbmariadb
5.5.28
oraclemysql
5.1.53
oraclemysql
5.5.19
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mysql-5.1
quantal
dne
precise
dne
oneiric
Fixed 5.1.66-0ubuntu0.11.10.3
released
lucid
dne
hardy
dne
mysql-5.5
quantal
Fixed 5.5.28-0ubuntu0.12.10.2
released
precise
Fixed 5.5.28-0ubuntu0.12.04.3
released
oneiric
dne
lucid
dne
hardy
dne
mysql-dfsg-5.1
quantal
dne
precise
dne
oneiric
dne
lucid
Fixed 5.1.66-0ubuntu0.10.04.3
released
hardy
dne
References