MariaDB Buffer Overflow Vulnerability

Release date:
Updated on: 2012-3 3

Affected Systems:
MariaDB 5.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56750
CVE (CAN) ID: CVE-2012-5579

MariaDB is a MySQL branch version that uses the Maria storage engine.

MariaDB versions earlier than 5.1.66, 5.2.13, 5.3.11, and 5.5.28a have security vulnerabilities. authenticated remote attackers can exploit this vulnerability to cause the MariaDB server to crash or execute arbitrary code with mysqld process permissions.

<* Source: vendor

Link: http://secunia.com/advisories/51443/
Https://kb.askmonty.org/en/mariadb-5528a-release-notes/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

MariaDB
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://mariadb.org/