MariaDB CVE-2012-4414 Multiple SQL Injection Vulnerabilities
BID:55498
Info
MariaDB CVE-2012-4414 Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 55498 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-4414 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 11 2012 12:00AM |
| Updated: | Apr 25 2013 07:50AM |
| Credit: | Kristian Nielsen |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE openSUSE 12.1 SuSE openSUSE 11.4 MySQL AB MySQL 6.0.10 MySQL AB MySQL 6.0.9 MySQL AB MySQL 6.0.8 MySQL AB MySQL 6.0.7 MySQL AB MySQL 6.0.6 MySQL AB MySQL 6.0.4 MySQL AB MySQL 6.0.3 MySQL AB MySQL 6.0.2 MySQL AB MySQL 6.0.1 MySQL AB MySQL 6.0 MySQL AB MySQL 5.5.22 MySQL AB MySQL 5.5.21 MySQL AB MySQL 5.5.20 MySQL AB MySQL 5.5.19 MySQL AB MySQL 5.5 -ms2 MySQL AB MySQL 5.5 MySQL AB MySQL 5.1.61 MySQL AB MySQL 5.1.60 MySQL AB MySQL 5.1.52 MySQL AB MySQL 5.1.51 MySQL AB MySQL 5.1.50 MySQL AB MySQL 5.1.49 MySQL AB MySQL 5.1.48 MySQL AB MySQL 5.1.47 MySQL AB MySQL 5.1.46 MySQL AB MySQL 5.1.45 MySQL AB MySQL 5.1.44 MySQL AB MySQL 5.1.43 MySQL AB MySQL 5.1.42 MySQL AB MySQL 5.1.42 MySQL AB MySQL 5.1.41 MySQL AB MySQL 5.1.39 MySQL AB MySQL 5.1.38 MySQL AB MySQL 5.1.37 MySQL AB MySQL 5.1.36 MySQL AB MySQL 5.1.35 MySQL AB MySQL 5.1.34 MySQL AB MySQL 5.1.33 MySQL AB MySQL 5.1.32 MySQL AB MySQL 5.1.31 MySQL AB MySQL 5.1.30 MySQL AB MySQL 5.1.26 MySQL AB MySQL 5.1.23 MySQL AB MySQL 5.1.22 MySQL AB MySQL 5.1.21 MySQL AB MySQL 5.1.20 MySQL AB MySQL 5.1.18 MySQL AB MySQL 5.1.17 MySQL AB MySQL 5.1.16 MySQL AB MySQL 5.1.15 MySQL AB MySQL 5.1.14 MySQL AB MySQL 5.1.13 MySQL AB MySQL 5.1.12 MySQL AB MySQL 5.1.11 MySQL AB MySQL 5.1.10 MySQL AB MySQL 5.1.9 MySQL AB MySQL 5.1.8 MySQL AB MySQL 5.1.6 MySQL AB MySQL 5.1.5 MySQL AB MySQL 5.1.4 MySQL AB MySQL 5.1.3 MySQL AB MySQL 5.1.2 MySQL AB MySQL 5.1.1 8 MySQL AB MySQL 5.0.63 MySQL AB MySQL 6.0 MySQL AB MySQL 5.6 MySQL AB MySQL 5.1.5A MySQL AB MySQL 5.1.46 Sp1 MySQL AB MySQL 5.1.43 Sp1 MySQL AB MySQL 5.1.40 Sp1 MySQL AB MySQL 5.1.40 MySQL AB MySQL 5.1.37 Sp1 MySQL AB MySQL 5.1.34 Sp1 MySQL AB MySQL 5.1.32-Bzr MySQL AB MySQL 5.1.31 Sp1 MySQL AB MySQL 5.1.29 MySQL AB MySQL 5.1.28 MySQL AB MySQL 5.1.27 MySQL AB MySQL 5.1.25 MySQL AB MySQL 5.1.24 MySQL AB MySQL 5.1.23A MySQL AB MySQL 5.1.23 Bk MySQL AB MySQL 5.1.23 A MySQL AB MySQL 5.1.19 MySQL AB MySQL 5.1 |
| Not Vulnerable: | |
Discussion
MariaDB CVE-2012-4414 Multiple SQL Injection Vulnerabilities
MariaDB is prone to multiple SQL-injection vulnerabilities because it fails to properly quote the user-supplied identifiers.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
MariaDB is prone to multiple SQL-injection vulnerabilities because it fails to properly quote the user-supplied identifiers.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
MariaDB CVE-2012-4414 Multiple SQL Injection Vulnerabilities
An attacker can exploit these issues through a browser.
An attacker can exploit these issues through a browser.
Solution / Fix
MariaDB CVE-2012-4414 Multiple SQL Injection Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
MariaDB CVE-2012-4414 Multiple SQL Injection Vulnerabilities
References:
References: