FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-1516

This CVE name corresponds to:

Entered Topic
2006-06-01 MySQL -- Information Disclosure and Buffer Overflow Vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2006-1516
Phase Assigned(20060330)

Description

The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.

References

Source Reference
BUGTRAQ 20060502 MySQL Anonymous Login Handshake - Information Leakage.
BUGTRAQ 20060516 UPDATE: [ GLSA 200605-13 ] MySQL: Information leakage
MISC http://www.wisec.it/vulns.php?page=7
CONFIRM http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html
CONFIRM http://bugs.debian.org/365938
CONFIRM http://docs.info.apple.com/article.html?artnum=305214
APPLE APPLE-SA-2007-03-13
DEBIAN DSA-1071
DEBIAN DSA-1073
DEBIAN DSA-1079
GENTOO GLSA-200605-13
MANDRIVA MDKSA-2006:084
REDHAT RHSA-2006:0544
SLACKWARE SSA:2006-155-01
SUNALERT 236703
SUSE SUSE-SR:2006:012
SUSE SUSE-SA:2006:036
TRUSTIX 2006-0028
UBUNTU USN-283-1
CERT TA07-072A
BID 17780
OVAL oval:org.mitre.oval:def:9918
VUPEN ADV-2006-1633
VUPEN ADV-2007-0930
VUPEN ADV-2008-1326
SECTRACK 1016017
SECUNIA 19929
SECUNIA 20002
SECUNIA 20073
SECUNIA 20076
SECUNIA 20223
SECUNIA 20241
SECUNIA 20253
SECUNIA 20333
SECUNIA 20424
SECUNIA 20457
SECUNIA 20625
SECUNIA 20762
SECUNIA 24479
SECUNIA 29847
SREASON 840
XF mysql-login-packet-info-disclosure(26236)