CVE-2006-1516
MEDIUM severity · CVSS 5
5CVSS MEDIUM
Summary
The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impactNone
Availability impactNone
Exploit probability (EPSS)33%
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html ↗
Additional information
- NVD record
- http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.htmlPatch
- http://secunia.com/advisories/19929Patch
- http://bugs.debian.org/365938
- http://docs.info.apple.com/article.html?artnum=305214
- http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html
- http://secunia.com/advisories/20002
- http://secunia.com/advisories/20073