DB: Oracle MySQL Multiple Commands Heap Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Oracle MySQL database server. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.

Affected Products

Mariadb mariadb

References

BugTraq: 56768

CVE: CVE-2012-5612

URL: http://www.oracle.com/us/products/mysql/index.html

Short Name

DB:MYSQL:COMMANDS-BO

Severity

Major

Recommended

False

Recommended Action

Drop

DB: Oracle MySQL Multiple Commands Heap Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?