CVE-2012-5611

Oracle MySQL <5.5.28 & MariaDB <5.5.28a - RCE

Title source: llm

Description

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.

Exploits (1)

exploitdb WORKING POC

by kingcope · perldoslinux

https://www.exploit-db.com/exploits/23075

View Code ZIP pw:eip

References (27)

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html

[Third Party Advisory] http://rhn.redhat.com/errata/RHSA-2012-1551.html

[Third Party Advisory] http://rhn.redhat.com/errata/RHSA-2013-0180.html

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2012/Dec/4

[Broken Link] http://secunia.com/advisories/51443

[Broken Link] http://secunia.com/advisories/53372

[Third Party Advisory] http://security.gentoo.org/glsa/glsa-201308-06.xml

[Third Party Advisory] http://www.debian.org/security/2012/dsa-2581

[Third Party Advisory, VDB Entry] http://www.exploit-db.com/exploits/23075

[Third Party Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2013:102

[Third Party Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

[Mailing List, Third Party Advisory] http://www.openwall.com/lists/oss-security/2012/12/02/3

[Mailing List, Third Party Advisory] http://www.openwall.com/lists/oss-security/2012/12/02/4

[Third Party Advisory] http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html

... and 7 more

Scores

EPSS 0.6665

EPSS Percentile 98.5%

Details

CWE

CWE-119

Status published

Products (46)

mariadb/mariadb 5.1.41

mariadb/mariadb 5.1.42

mariadb/mariadb 5.1.44

mariadb/mariadb 5.1.47

mariadb/mariadb 5.1.49

mariadb/mariadb 5.1.50

mariadb/mariadb 5.1.51

mariadb/mariadb 5.1.53

mariadb/mariadb 5.1.55

mariadb/mariadb 5.1.60

... and 36 more

Published Dec 03, 2012

Tracked Since Feb 18, 2026