CVE-2012-5613 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-5613 Interim 1 20 2025-11-05T05:32:10Z current 2021-05-30T13:07:20Z 2025-11-05T05:32:10Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-5613 MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this issue, stating that this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: it could be argued that this should not be included in CVE because it is a configuration issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2013-February/000340.html E-Mail link for SUSE-SU-2013:0262-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 libmysqlclient-devel-5.0.96-0.6.1 libmysqlclient15-32bit-5.0.96-0.6.1 libmysqlclient15-32bit-5.0.96-0.8.8.2 libmysqlclient15-5.0.96-0.6.1 libmysqlclient15-x86-5.0.96-0.6.1 libmysqlclient_r15-32bit-5.0.96-0.6.1 libmysqlclient_r15-5.0.96-0.6.1 libmysqlclient_r15-x86-5.0.96-0.6.1 mysql-5.0.96-0.6.1 mysql-Max-5.0.96-0.6.1 mysql-client-5.0.96-0.6.1 mysql-tools-5.0.96-0.6.1 libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 libmysqlclient15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 libmysqlclient_r15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 mysql-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 mysql-client-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libmysqlclient15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-Max-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-client-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-tools-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient15-32bit-5.0.96-0.8.8.2 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient15-x86-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-Max-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-client-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-tools-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 libmysqlclient15-32bit-5.0.96-0.8.8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 libmysqlclient15-x86-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 mysql-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 mysql-Max-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 mysql-client-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 mysql-tools-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 libmysqlclient-devel-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 libmysqlclient_r15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 libmysqlclient_r15-x86-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this issue, stating that this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: it could be argued that this should not be included in CVE because it is a configuration issue. CVE-2012-5613 SUSE Linux Enterprise Desktop 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Desktop 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Desktop 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Desktop 11 SP2:libmysqlclient_r15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Desktop 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Desktop 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-32bit-5.0.96-0.8.8.2 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-32bit-5.0.96-0.8.8.2 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP2:libmysqlclient-devel-5.0.96-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP2:libmysqlclient_r15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP2:libmysqlclient_r15-x86-5.0.96-0.6.1 moderate 6 AV:N/AC:M/Au:S/C:P/I:P/A:P