Signature Detail

DB: Oracle MySQL Grant File Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Oracle MySQL database server. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

per http://www.openwall.com/lists/oss-security/2012/12/02/3, this vulnerability is only on linux-based software installations

Affected Products

• Mariadb mariadb 5.1.41
• Mariadb mariadb 5.1.42
• Mariadb mariadb 5.1.44
• Mariadb mariadb 5.1.47
• Mariadb mariadb 5.1.49
• Mariadb mariadb 5.1.50
• Mariadb mariadb 5.1.51
• Mariadb mariadb 5.1.53
• Mariadb mariadb 5.1.55
• Mariadb mariadb 5.1.60
• Mariadb mariadb 5.1.61
• Mariadb mariadb 5.1.62
• Mariadb mariadb 5.2.0
• Mariadb mariadb 5.2.1
• Mariadb mariadb 5.2.10
• Mariadb mariadb 5.2.11
• Mariadb mariadb 5.2.12
• Mariadb mariadb 5.2.2
• Mariadb mariadb 5.2.3
• Mariadb mariadb 5.2.4
• Mariadb mariadb 5.2.5
• Mariadb mariadb 5.2.6
• Mariadb mariadb 5.2.7
• Mariadb mariadb 5.2.8
• Mariadb mariadb 5.2.9
• Mariadb mariadb 5.3.0
• Mariadb mariadb 5.3.1
• Mariadb mariadb 5.3.10
• Mariadb mariadb 5.3.2
• Mariadb mariadb 5.3.3
• Mariadb mariadb 5.3.4
• Mariadb mariadb 5.3.5
• Mariadb mariadb 5.3.6
• Mariadb mariadb 5.3.7
• Mariadb mariadb 5.3.8
• Mariadb mariadb 5.3.9
• Mariadb mariadb 5.5.20
• Mariadb mariadb 5.5.21
• Mariadb mariadb 5.5.22
• Mariadb mariadb 5.5.23
• Mariadb mariadb 5.5.24
• Mariadb mariadb 5.5.25
• Mariadb mariadb 5.5.27
• Mariadb mariadb 5.5.28
• Oracle mysql 5.1.53
• Oracle mysql 5.5.19

References

• CVE: CVE-2012-5611
• URL: http://www.oracle.com/us/products/mysql/index.html