CVE-2006-1516

Published: May 5, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.

Affected (71)

Products: Mysql: Mysql · Oracle: Mysql

1 product

1 product

Configuration A

71 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Version 4.1.0
Mysql Mysql	Version 4.1.10
Mysql Mysql	Version 4.1.12
Mysql Mysql	Version 4.1.13
Mysql Mysql	Version 4.1.14
Mysql Mysql	Version 4.1.15
Mysql Mysql	Version 4.1.3
Mysql Mysql	Version 4.1.8
Mysql Mysql	Version 5.0.10
Mysql Mysql	Version 5.0.15
Mysql Mysql	Version 5.0.16
Mysql Mysql	Version 5.0.17
Mysql Mysql	Version 5.0.1
Mysql Mysql	Version 5.0.2
Mysql Mysql	Version 5.0.3
Mysql Mysql	Version 5.0.4
Mysql Mysql	Version 5.0.5
Oracle Mysql	Version 4.0.0
Oracle Mysql	Version 4.0.10
Oracle Mysql	Version 4.0.11
Oracle Mysql	Version 4.0.11 gamma
Oracle Mysql	Version 4.0.12
Oracle Mysql	Version 4.0.13
Oracle Mysql	Version 4.0.14
Oracle Mysql	Version 4.0.15
Oracle Mysql	Version 4.0.16
Oracle Mysql	Version 4.0.17
Oracle Mysql	Version 4.0.18
Oracle Mysql	Version 4.0.19
Oracle Mysql	Version 4.0.1
Oracle Mysql	Version 4.0.20
Oracle Mysql	Version 4.0.21
Oracle Mysql	Version 4.0.23
Oracle Mysql	Version 4.0.24
Oracle Mysql	Version 4.0.25
Oracle Mysql	Version 4.0.26
Oracle Mysql	Version 4.0.2
Oracle Mysql	Version 4.0.3
Oracle Mysql	Version 4.0.4
Oracle Mysql	Version 4.0.5
Oracle Mysql	Version 4.0.5a
Oracle Mysql	Version 4.0.6
Oracle Mysql	Version 4.0.7
Oracle Mysql	Version 4.0.7 gamma
Oracle Mysql	Version 4.0.8
Oracle Mysql	Version 4.0.8 gamma
Oracle Mysql	Version 4.0.9
Oracle Mysql	Version 4.0.9 gamma
Oracle Mysql	Version 4.1.0 alpha
Oracle Mysql	Version 4.1.11
Oracle Mysql	Version 4.1.16
Oracle Mysql	Version 4.1.17
Oracle Mysql	Version 4.1.18
Oracle Mysql	Version 4.1.2 alpha
Oracle Mysql	Version 4.1.3 beta
Oracle Mysql	Version 4.1.4
Oracle Mysql	Version 4.1.5
Oracle Mysql	Version 4.1.6
Oracle Mysql	Version 4.1.7
Oracle Mysql	Version 4.1.9
Oracle Mysql	Version 5.0.0 alpha
Oracle Mysql	Version 5.0.11
Oracle Mysql	Version 5.0.12
Oracle Mysql	Version 5.0.13
Oracle Mysql	Version 5.0.14
Oracle Mysql	Version 5.0.18
Oracle Mysql	Version 5.0.3 beta
Oracle Mysql	Version 5.0.6
Oracle Mysql	Version 5.0.7
Oracle Mysql	Version 5.0.8
Oracle Mysql	Version 5.0.9

References (84)

http://bugs.debian.org/365938

Source: security@debian.org

http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html

Source: security@debian.org

Patch

http://docs.info.apple.com/article.html?artnum=305214

Source: security@debian.org

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Source: security@debian.org

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html

Source: security@debian.org

http://secunia.com/advisories/19929

Source: security@debian.org

PatchVendor Advisory

http://secunia.com/advisories/20002

Source: security@debian.org

http://secunia.com/advisories/20073

Source: security@debian.org

http://secunia.com/advisories/20076

Source: security@debian.org

http://secunia.com/advisories/20223

Source: security@debian.org

http://secunia.com/advisories/20241

Source: security@debian.org

http://secunia.com/advisories/20253

Source: security@debian.org

http://secunia.com/advisories/20333

Source: security@debian.org

http://secunia.com/advisories/20424

Source: security@debian.org

http://secunia.com/advisories/20457

Source: security@debian.org

http://secunia.com/advisories/20625

Source: security@debian.org

http://secunia.com/advisories/20762

Source: security@debian.org

http://secunia.com/advisories/24479

Source: security@debian.org

http://secunia.com/advisories/29847

Source: security@debian.org

http://securityreason.com/securityalert/840

Source: security@debian.org

http://securitytracker.com/id?1016017

Source: security@debian.org

Patch

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377

Source: security@debian.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1

Source: security@debian.org

http://www.debian.org/security/2006/dsa-1071

Source: security@debian.org

http://www.debian.org/security/2006/dsa-1073

Source: security@debian.org

http://www.debian.org/security/2006/dsa-1079

Source: security@debian.org

http://www.gentoo.org/security/en/glsa/glsa-200605-13.xml

Source: security@debian.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:084

Source: security@debian.org

http://www.novell.com/linux/security/advisories/2006-06-02.html

Source: security@debian.org

http://www.redhat.com/support/errata/RHSA-2006-0544.html

Source: security@debian.org

http://www.securityfocus.com/archive/1/432733/100/0/threaded

Source: security@debian.org

http://www.securityfocus.com/archive/1/434164/100/0/threaded

Source: security@debian.org

http://www.securityfocus.com/bid/17780

Source: security@debian.org

http://www.trustix.org/errata/2006/0028

Source: security@debian.org

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: security@debian.org

US Government Resource

http://www.vupen.com/english/advisories/2006/1633

Source: security@debian.org

http://www.vupen.com/english/advisories/2007/0930

Source: security@debian.org

http://www.vupen.com/english/advisories/2008/1326/references

Source: security@debian.org

http://www.wisec.it/vulns.php?page=7

Source: security@debian.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/26236

Source: security@debian.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9918

Source: security@debian.org

https://usn.ubuntu.com/283-1/

Source: security@debian.org

http://bugs.debian.org/365938