PT-2006-2523 · Oracle · Mysql Server

Stefano Di Paola · Publicado 2006-05-05 · Atualizado 2019-12-17 · CVE-2006-1518

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: MySQL versions 5.0.x up to 5.0.20

Description: A buffer overflow issue exists in the open table function in sql base.cc, potentially allowing remote attackers to execute arbitrary code via crafted COM TABLE DUMP packets with invalid length values.

Recommendations: For MySQL versions 5.0.x up to 5.0.20, update to a version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2006-1518

DSA-1071-1

DSA-1073-1

DSA-1079-1

Produtos afetados

Mysql Server

Referências · 23

• 🔥 https://exploit-db.com/exploits/1741 · Exploit
• http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html · Aviso do Fabricante
• http://secunia.com/advisories/20253 · Nota
• http://wisec.it/vulns.php?page=8 · Correção
• http://secunia.com/advisories/20457 · Nota
• http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html · Correção
• http://securityfocus.com/archive/1/432734/100/0/threaded · Nota
• http://debian.org/security/2006/dsa-1071 · Aviso do Fabricante
• http://debian.org/security/2006/dsa-1073 · Aviso do Fabricante
• http://securityfocus.com/bid/17780 · Nota
• http://securityreason.com/securityalert/839 · Nota
• http://secunia.com/advisories/20241 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26232 · Nota
• http://vupen.com/english/advisories/2006/1633 · Nota
• http://kb.cert.org/vuls/id/602457 · Correção