CVE-2010-3064

2010-08-2000:00:00

ubuntu.com

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

Stack-based buffer overflow in the php_mysqlnd_auth_write function in the
Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependent
attackers to cause a denial of service (crash) and possibly execute
arbitrary code via a long (1) username or (2) database name argument to the
(a) mysql_connect or (b) mysqli_connect function.