CVE-2012-4452 Privilege escalation in n/a
Local attackers can bypass privilege checks to access or modify data in other tables via symlink manipulation in MyISAM table creation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-4452?
CVE-2012-4452 is a low-severity vulnerability in Oracle Mysql, published on 9 Oct 2012. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
MySQL 5.0.88, and possibly other versions and platforms, allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of a CVE-2009-4030 regression, which was not omitted in other packages and versions such as MySQL 5.0.95 in Red Hat Enterprise Linux 6.
Weakness: CWE-264
Which versions are affected by CVE-2012-4452?
It affects 1 product.
Linux distribution packages (14)
mysql Red Hat:enterprise_linux:5::client | All versions | 0:5.0.95-3.el5 |
mysql-debuginfo Red Hat:enterprise_linux:5::client | All versions | 0:5.0.95-3.el5 |
mysql Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.0.95-3.el5 |
mysql-bench Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.0.95-3.el5 |
mysql-debuginfo Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.0.95-3.el5 |
mysql-devel Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.0.95-3.el5 |
mysql-server Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.0.95-3.el5 |
mysql-test Red Hat:enterprise_linux:5::client_workstation | All versions | 0:5.0.95-3.el5 |
mysql Red Hat:enterprise_linux:5::server | All versions | 0:5.0.95-3.el5 |
mysql-bench Red Hat:enterprise_linux:5::server | All versions | 0:5.0.95-3.el5 |
mysql-debuginfo Red Hat:enterprise_linux:5::server | All versions | 0:5.0.95-3.el5 |
mysql-devel Red Hat:enterprise_linux:5::server | All versions | 0:5.0.95-3.el5 |
mysql-server Red Hat:enterprise_linux:5::server | All versions | 0:5.0.95-3.el5 |
mysql-test Red Hat:enterprise_linux:5::server | All versions | 0:5.0.95-3.el5 |
Products include Oracle Mysql.
How do I fix CVE-2012-4452?
Apply the vendor's patch.
Is CVE-2012-4452 being exploited?
There is no known exploitation of CVE-2012-4452 in the wild and no public exploit code.
Other vulnerabilities in Oracle Mysql
Sources
Also known as GHSA-552j-94gg-c5pj, RHSA-2013:0121.