Lucene search
PRIOn knowledge basePRION:CVE-2012-5627HistoryOct 01, 2013 - 5:55 p.m.
Command injection
2013-10-0117:55:00
PRIOn knowledge base
www.prio-n.com
3
Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks.
References
seclists.org/fulldisclosure/2012/Dec/58
seclists.org/fulldisclosure/2012/Dec/83
seclists.org/oss-sec/2012/q4/424
secunia.com/advisories/53372
security.gentoo.org/glsa/glsa-201308-06.xml
www.mandriva.com/security/advisories?name=MDVSA-2013:102
bugzilla.redhat.com/show_bug.cgi?id=883719
mariadb.atlassian.net/browse/MDEV-3915
Related
cve
cve
CVE-2012-5627
2013-10-01 17:55:03
ubuntucve
ubuntucve
CVE-2012-5627
2013-10-01 00:00:00
cvelist
cvelist
CVE-2012-5627
2013-10-01 17:00:00
openvas
openvas
MariaDB 'COM_CHANGE_USER' Command Insecure Salt Generation Security Bypass Vulnerability - Linux
2016-06-07 00:00:00
MariaDB 'COM_CHANGE_USER' Command Insecure Salt Generation Security Bypass Vulnerability
2013-11-06 00:00:00
Ubuntu Update for mysql-5.5 USN-1807-1
2013-04-25 00:00:00
mariadbunix
mariadbunix
CVE-2012-5627
2013-10-01 17:55:00
cbl_mariner
cbl_mariner
CVE-2012-5627 affecting package mysql 8.0.29-1
2021-09-09 15:03:39
CVE-2012-5627 affecting package mysql for versions less than 8.0.24-1
2022-04-09 06:53:03
nessus
nessus
MySQL Server COM_CHANGE_USER Command Security Bypass
2013-11-27 00:00:00
FreeBSD : mysql/mariadb/percona server -- multiple vulnerabilities (8c773d7f-6cbb-11e2-b242-c8600054b392)
2013-02-04 00:00:00
Mandriva Linux Security Advisory : mariadb (MDVSA-2013:102)
2013-04-20 00:00:00
nvd
nvd
CVE-2012-5627
2013-10-01 17:55:03
seebug
seebug
Oracle MySQL/MariaDB ไธๅฎๅ
จSalt็ๆๅฎๅ
จ็ป่ฟๆผๆด(CVE-2012-5627)
2012-12-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package mariadb version April
2013-04-01 00:00:00
freebsd
freebsd
mysql/mariadb/percona server -- multiple vulnerabilities
2012-12-01 00:00:00
gentoo
gentoo
MySQL: Multiple vulnerabilities
2013-08-29 00:00:00