CVE-2006-1517

Published: May 5, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.

Affected (71)

Products: Mysql: Mysql · Oracle: Mysql

1 product

1 product

Configuration A

71 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Version 4.1.0
Mysql Mysql	Version 4.1.10
Mysql Mysql	Version 4.1.12
Mysql Mysql	Version 4.1.13
Mysql Mysql	Version 4.1.14
Mysql Mysql	Version 4.1.15
Mysql Mysql	Version 4.1.3
Mysql Mysql	Version 4.1.8
Mysql Mysql	Version 5.0.10
Mysql Mysql	Version 5.0.15
Mysql Mysql	Version 5.0.16
Mysql Mysql	Version 5.0.17
Mysql Mysql	Version 5.0.1
Mysql Mysql	Version 5.0.2
Mysql Mysql	Version 5.0.3
Mysql Mysql	Version 5.0.4
Mysql Mysql	Version 5.0.5
Oracle Mysql	Version 4.0.0
Oracle Mysql	Version 4.0.10
Oracle Mysql	Version 4.0.11
Oracle Mysql	Version 4.0.11 gamma
Oracle Mysql	Version 4.0.12
Oracle Mysql	Version 4.0.13
Oracle Mysql	Version 4.0.14
Oracle Mysql	Version 4.0.15
Oracle Mysql	Version 4.0.16
Oracle Mysql	Version 4.0.17
Oracle Mysql	Version 4.0.18
Oracle Mysql	Version 4.0.19
Oracle Mysql	Version 4.0.1
Oracle Mysql	Version 4.0.20
Oracle Mysql	Version 4.0.21
Oracle Mysql	Version 4.0.23
Oracle Mysql	Version 4.0.24
Oracle Mysql	Version 4.0.25
Oracle Mysql	Version 4.0.26
Oracle Mysql	Version 4.0.2
Oracle Mysql	Version 4.0.3
Oracle Mysql	Version 4.0.4
Oracle Mysql	Version 4.0.5
Oracle Mysql	Version 4.0.5a
Oracle Mysql	Version 4.0.6
Oracle Mysql	Version 4.0.7
Oracle Mysql	Version 4.0.7 gamma
Oracle Mysql	Version 4.0.8
Oracle Mysql	Version 4.0.8 gamma
Oracle Mysql	Version 4.0.9
Oracle Mysql	Version 4.0.9 gamma
Oracle Mysql	Version 4.1.0 alpha
Oracle Mysql	Version 4.1.11
Oracle Mysql	Version 4.1.16
Oracle Mysql	Version 4.1.17
Oracle Mysql	Version 4.1.18
Oracle Mysql	Version 4.1.2 alpha
Oracle Mysql	Version 4.1.3 beta
Oracle Mysql	Version 4.1.4
Oracle Mysql	Version 4.1.5
Oracle Mysql	Version 4.1.6
Oracle Mysql	Version 4.1.7
Oracle Mysql	Version 4.1.9
Oracle Mysql	Version 5.0.0 alpha
Oracle Mysql	Version 5.0.11
Oracle Mysql	Version 5.0.12
Oracle Mysql	Version 5.0.13
Oracle Mysql	Version 5.0.14
Oracle Mysql	Version 5.0.18
Oracle Mysql	Version 5.0.3 beta
Oracle Mysql	Version 5.0.6
Oracle Mysql	Version 5.0.7
Oracle Mysql	Version 5.0.8
Oracle Mysql	Version 5.0.9

References (86)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939

Source: security@debian.org

Patch

http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html

Source: security@debian.org

Patch

http://docs.info.apple.com/article.html?artnum=305214

Source: security@debian.org

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Source: security@debian.org

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html

Source: security@debian.org

http://secunia.com/advisories/19929

Source: security@debian.org

PatchVendor Advisory

http://secunia.com/advisories/20002

Source: security@debian.org

http://secunia.com/advisories/20073

Source: security@debian.org

http://secunia.com/advisories/20076

Source: security@debian.org

http://secunia.com/advisories/20223

Source: security@debian.org

http://secunia.com/advisories/20241

Source: security@debian.org

http://secunia.com/advisories/20253

Source: security@debian.org

http://secunia.com/advisories/20333

Source: security@debian.org

http://secunia.com/advisories/20424

Source: security@debian.org

http://secunia.com/advisories/20457

Source: security@debian.org

http://secunia.com/advisories/20625

Source: security@debian.org

http://secunia.com/advisories/20762

Source: security@debian.org

http://secunia.com/advisories/24479

Source: security@debian.org

http://secunia.com/advisories/29847

Source: security@debian.org

http://securityreason.com/securityalert/839

Source: security@debian.org

http://securitytracker.com/id?1016016

Source: security@debian.org

Patch

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377

Source: security@debian.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1

Source: security@debian.org

http://www.debian.org/security/2006/dsa-1071

Source: security@debian.org

http://www.debian.org/security/2006/dsa-1073

Source: security@debian.org

http://www.debian.org/security/2006/dsa-1079

Source: security@debian.org

http://www.gentoo.org/security/en/glsa/glsa-200605-13.xml

Source: security@debian.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:084

Source: security@debian.org

http://www.novell.com/linux/security/advisories/2006-06-02.html

Source: security@debian.org

http://www.osvdb.org/25228

Source: security@debian.org

http://www.redhat.com/support/errata/RHSA-2006-0544.html

Source: security@debian.org

http://www.securityfocus.com/archive/1/432734/100/0/threaded

Source: security@debian.org

http://www.securityfocus.com/archive/1/434164/100/0/threaded

Source: security@debian.org

http://www.securityfocus.com/bid/17780

Source: security@debian.org

http://www.trustix.org/errata/2006/0028

Source: security@debian.org

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: security@debian.org

US Government Resource

http://www.vupen.com/english/advisories/2006/1633

Source: security@debian.org

http://www.vupen.com/english/advisories/2007/0930

Source: security@debian.org

http://www.vupen.com/english/advisories/2008/1326/references

Source: security@debian.org

http://www.wisec.it/vulns.php?page=8

Source: security@debian.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/26228

Source: security@debian.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11036

Source: security@debian.org

https://usn.ubuntu.com/283-1/

Source: security@debian.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939