PT-2006-2522 · Oracle+1 · Mysql Server+1

Stefano Di Paola · Published 2006-05-05 · Updated 2019-12-17 · CVE-2006-1517

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: MySQL versions 4.0.x up to 4.0.26 MySQL versions 4.1.x up to 4.1.18 MySQL versions 5.0.x up to 5.0.20

Description: The issue allows remote attackers to obtain sensitive information via a COM TABLE DUMP request with an incorrect packet length, which includes portions of memory in an error message.

Recommendations: For MySQL versions 4.0.x up to 4.0.26, update to a version later than 4.0.26 to resolve the issue. For MySQL versions 4.1.x up to 4.1.18, update to a version later than 4.1.18 to resolve the issue. For MySQL versions 5.0.x up to 5.0.20, update to a version later than 5.0.20 to resolve the issue.

Fix

Related Identifiers

CVE-2006-1517

DSA-1071-1

DSA-1073-1

DSA-1079-1

RHSA-2006:0544

RHSA-2006_0544

Affected Products

Mysql Server

Red Hat

References · 53

• http://wisec.it/vulns.php?page=8 · Patch
• http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html · Patch
• http://debian.org/security/2006/dsa-1071 · Vendor Advisory
• http://debian.org/security/2006/dsa-1073 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1079 · Vendor Advisory
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939 · Patch
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200605-13.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0544.html · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html · Vendor Advisory
• https://usn.ubuntu.com/283-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:084 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1517 · Security Note