CVE-2006-1516 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2006-1516
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-1516

Description: The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/26236 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-283-1 TRUSTIX http://www.trustix.org/errata/2006/0028 SUSE http://www.novell.com/linux/security/advisories/2006-06-02.html http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1 ST 1016017 SREASON http://securityreason.com/securityalert/840 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377 SAID Secunia Advisory: SA24479 Secunia Advisory: SA20762 Secunia Advisory: SA20625 Secunia Advisory: SA20457 Secunia Advisory: SA20424 Secunia Advisory: SA20333 Secunia Advisory: SA20253 Secunia Advisory: SA20241 Secunia Advisory: SA20223 Secunia Advisory: SA20002 Secunia Advisory: SA20073 Secunia Advisory: SA20076 Secunia Advisory: SA19929 Secunia Advisory: SA29847 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0544.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9918 MISC http://www.wisec.it/vulns.php?page=7 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2006:084 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200605-13.xml DEBIAN http://www.debian.org/security/2006/dsa-1079 http://www.debian.org/security/2006/dsa-1073 http://www.debian.org/security/2006/dsa-1071 CONFIRM http://bugs.debian.org/365938 http://docs.info.apple.com/article.html?artnum=305214 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html CERT http://www.us-cert.gov/cas/techalerts/TA07-072A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/434164/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/432733/100/0/threaded BID 17780 APPLE http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability