DB: Oracle MySQL Grant File Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Oracle MySQL database server. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.

References

CVE: CVE-2012-5611

URL: http://www.oracle.com/us/products/mysql/index.html

Short Name

DB:MYSQL:GRANT-FILE-BO

Severity

Major

Recommended

False

Recommended Action

Drop

DB: Oracle MySQL Grant File Stack Buffer Overflow

Extended Description

References

Found a potential security threat?