Lucene search
GoogleOSV:DSA-1073-1HistoryMay 22, 2006 - 12:00 a.m.
mysql-dfsg-4.1 - several vulnerabilities
2006-05-2200:00:00
Google
osv.dev
5
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.923 High
EPSS
Percentile
98.5%
Several vulnerabilities have been discovered in MySQL, a popular SQL
database. The Common Vulnerabilities and Exposures Project identifies
the following problems:
- CVE-2006-0903
Improper handling of SQL queries containing the NULL character
allows local users to bypass logging mechanisms. - CVE-2006-1516
Usernames without a trailing null byte allow remote attackers to
read portions of memory. - CVE-2006-1517
A request with an incorrect packet length allows remote attackers
to obtain sensitive information. - CVE-2006-1518
Specially crafted request packets with invalid length values allow
the execution of arbitrary code.
The following vulnerability matrix shows which version of MySQL in
which distribution has this problem fixed:
| woody | sarge | sid | |
|---|---|---|---|
| mysql | 3.23.49-8.15 | n/a | n/a |
| mysql-dfsg | n/a | 4.0.24-10sarge2 | n/a |
| mysql-dfsg-4.1 | n/a | 4.1.11a-4sarge3 | n/a |
| mysql-dfsg-5.0 | n/a | n/a | 5.0.21-3 |
We recommend that you upgrade your mysql packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mysql-dfsg-4.1 | eq | 4.1.11a-4 | |
| mysql-dfsg-4.1 | eq | 4.1.11a-4sarge1 | |
| mysql-dfsg-4.1 | eq | 4.1.11a-4sarge2 |
References
Related
nessus
nessus
Fedora Core 5 : mysql-5.0.21-2.FC5.1 (2006-553)
2007-01-17 00:00:00
Fedora Core 4 : mysql-4.1.19-1.FC4.1 (2006-554)
2007-01-17 00:00:00
Debian DSA-1073-1 : mysql-dfsg-4.1 - several vulnerabilities
2006-10-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 1079-1 (mysql-dfsg)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1071-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 1071-1 (mysql)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities
2006-05-22 09:30:15
[SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities
2006-05-22 16:04:10
[SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities
2006-05-22 16:04:10
osv
osv
mysql-dfsg - several
2006-05-29 00:00:00
mysql - several vulnerabilities
2006-05-22 00:00:00
suse
suse
remote code execution in mysql
2006-06-23 08:26:58
freebsd
freebsd
MySQL -- Information Disclosure and Buffer Overflow Vulnerabilities
2006-05-02 00:00:00
mysql50-server -- COM_TABLE_DUMP arbitrary code execution
2006-05-02 00:00:00
slackware
slackware
[slackware-security] mysql
2006-05-09 22:19:51
[slackware-security] mysql
2006-06-05 08:12:48
altlinux
altlinux
Security fix for the ALT Linux 5 package MySQL version 5.0.21-alt1
2006-05-10 00:00:00
Security fix for the ALT Linux 5 package MySQL version 5.0.18-alt2
2006-04-09 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2006-05-08 00:00:00
MySQL vulnerability
2006-05-15 00:00:00
MySQL vulnerability
2006-04-27 00:00:00
gentoo
gentoo
MySQL: Information leakage
2006-05-11 00:00:00
centos
centos
mysql security update
2006-06-09 17:37:00
redhat
redhat
(RHSA-2006:0544) mysql security update
2006-06-09 00:00:00
(RHSA-2007:0083) Low: mysql security update
2007-02-19 00:00:00
(RHSA-2008:0364) Low: mysql security and bug fix update
2008-05-20 00:00:00
checkpoint_advisories
checkpoint_advisories
MySQL COM_TABLE_DUMP Function Stack Overflow (CVE-2006-1517)
2009-11-12 00:00:00
Preemptive Protection against MySQL sql_parse Information Disclosure Vulnerabilities
2006-06-18 00:00:00
MySQL Login Handshake Information Disclosure (CVE-2006-1516)
2009-11-12 00:00:00
prion
prion
Design/Logic Flaw
2006-05-05 12:46:00
Design/Logic Flaw
2006-02-27 23:02:00
Buffer overflow
2006-05-05 12:46:00
ubuntucve
ubuntucve
veracode
veracode
Bypass Logging Mechanism
2020-04-10 00:14:19
cve
cve
cert
cert
MySQL fails to properly validate COM_TABLE_DUMP packets
2006-05-05 00:00:00
oraclelinux
oraclelinux
mysql security and bug fix update
2008-05-30 00:00:00
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.923 High
EPSS
Percentile
98.5%
Related for OSV:DSA-1073-1