CVE-2006-1518
MEDIUM severity · CVSS 6.5
6.5CVSS MEDIUM
Summary
Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)36%
AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939 ↗
Additional information
- NVD record
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939Patch
- http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.htmlPatch
- http://secunia.com/advisories/19929Patch
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html
- http://secunia.com/advisories/20241
- http://secunia.com/advisories/20253
- http://secunia.com/advisories/20333
- http://secunia.com/advisories/20457