BugTraq
MySQL (Linux) Stack based buffer overrun PoC Zeroday Dec 01 2012 09:26PM
king cope (isowarez isowarez isowarez googlemail com) (2 replies)
Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday Dec 02 2012 06:00AM
Kurt Seifried (kseifried redhat com) (2 replies)
Re: [oss-security] Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday Dec 02 2012 10:23AM
Huzaifa Sidhpurwala (huzaifas redhat com) (1 replies)
On 12/02/2012 11:30 AM, Kurt Seifried wrote:
> So normally for MySQL issues Oracle would assign the CVE #. However in
> this case we have a bit of a time constraint (it's a weekend and this
> is blowing up quickly) and the impacts are potentially quite severe.
> So I've spoken with some other Red Hat SRT members and we feel it is
> best to get CVE #'s assigned for these issues quickly so we can refer
> to them properly.
>
> If Oracle security has already assigned CVE's for these please let us
> and the public know so we can use the correct numbers. Also if Oracle
> can let the public know which versions of MySQL are affected (e.g.
> 5.0.x, 5.1.x, 5.5.x, etc.) that would be very helpful to everyone I am
> sure.
>

So here are the CVEs which Kurt meant to assign, but somehow
that mail never reached the lists.

* CVE-2012-5611 MySQL (Linux) Stack based buffer overrun PoC Zeroday
http://seclists.org/fulldisclosure/2012/Dec/4
https://bugzilla.redhat.com/show_bug.cgi?id=882599

* CVE-2012-5612 MySQL (Linux) Heap Based Overrun PoC Zeroday
http://seclists.org/fulldisclosure/2012/Dec/5
https://bugzilla.redhat.com/show_bug.cgi?id=882600

* CVE-2012-5613 MySQL (Linux) Database Privilege Elevation Zeroday
Exploit
http://seclists.org/fulldisclosure/2012/Dec/6
https://bugzilla.redhat.com/show_bug.cgi?id=882606

* CVE-2012-5614 MySQL Denial of Service Zeroday PoC
http://seclists.org/fulldisclosure/2012/Dec/7
https://bugzilla.redhat.com/show_bug.cgi?id=882607

* CVE-2012-5615 MySQL Remote Preauth User Enumeration Zeroday
http://seclists.org/fulldisclosure/2012/Dec/9
https://bugzilla.redhat.com/show_bug.cgi?id=882608

--
Huzaifa Sidhpurwala / Red Hat Security Response Team

[ reply ]
Re: [Full-disclosure] MySQL (Linux) Stack based buffer overrun PoC Zeroday Dec 01 2012 10:34PM
Jeffrey Walton (noloader gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus