Gravité: : Medium
  Identifiant(s) CVE: : CVE-2006-1518
  Date du conseil: 21 juillet 2015

  Description

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

  Information Exposure Rating:

Apply associated Trend Micro DPI Rules.

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1000466
  Trend Micro Deep Security DPI Rule Name: 1000466 - MySQL COM_TABLE_DUMP Function Stack Overflow

  Affected software and version:

  • MySQL MySQL 5.0
  • MySQL MySQL 5.0.0-0
  • MySQL MySQL 5.0.0-alpha
  • MySQL MySQL 5.0.1
  • MySQL MySQL 5.0.10
  • MySQL MySQL 5.0.11
  • MySQL MySQL 5.0.12
  • MySQL MySQL 5.0.13
  • MySQL MySQL 5.0.14
  • MySQL MySQL 5.0.15
  • MySQL MySQL 5.0.16
  • MySQL MySQL 5.0.17
  • MySQL MySQL 5.0.18
  • MySQL MySQL 5.0.19
  • MySQL MySQL 5.0.2
  • MySQL MySQL 5.0.20
  • MySQL MySQL 5.0.3
  • MySQL MySQL 5.0.3-Beta
  • MySQL MySQL 5.0.4
  • MySQL MySQL 5.0.5
  • MySQL MySQL 5.0.6
  • MySQL MySQL 5.0.7
  • MySQL MySQL 5.0.8
  • MySQL MySQL 5.0.9