CVE-2005-2558: Buffer Overflow

Published Aug 16, 2005
·
Updated

Stack-based buffer overflow in the initsyms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long functionname field.

Affected Software

38 affected components
MySQL mysql=5.0.3
MySQL mysql=4.1.10
MySQL mysql=5.0.2
MySQL mysql=5.0.1
MySQL mysql=4.1.0
MySQL mysql=5.0.4
MySQL mysql=4.1.3
Oracle MySQL=4.0.0
Oracle MySQL=4.0.1
Oracle MySQL=4.0.2
Oracle MySQL=4.0.3
Oracle MySQL=4.0.4
Oracle MySQL=4.0.5
Oracle MySQL=4.0.5a
Oracle MySQL=4.0.6
Oracle MySQL=4.0.7
Oracle MySQL=4.0.7-gamma
Oracle MySQL=4.0.8-gamma
Oracle MySQL=4.0.8
Oracle MySQL=4.0.9
Oracle MySQL=4.0.9-gamma
Oracle MySQL=4.0.10
Oracle MySQL=4.0.11-gamma
Oracle MySQL=4.0.11
Oracle MySQL=4.0.12
Oracle MySQL=4.0.13
Oracle MySQL=4.0.14
Oracle MySQL=4.0.15
Oracle MySQL=4.0.18
Oracle MySQL=4.0.20
Oracle MySQL=4.0.21
Oracle MySQL=4.0.24
Oracle MySQL=4.1.0-alpha
Oracle MySQL=4.1.2-alpha
Oracle MySQL=4.1.3-beta
Oracle MySQL=4.1.4
Oracle MySQL=4.1.5
Oracle MySQL=5.0.0-alpha

Event History

Aug 16, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2005-2558?

CVE-2005-2558 is classified as a high severity vulnerability due to its impact on remote code execution for authenticated users.

2

How do I fix CVE-2005-2558?

To fix CVE-2005-2558, you should upgrade to MySQL versions 4.0.25, 4.1.13, or 5.0.7-beta and later.

3

Who is affected by CVE-2005-2558?

CVE-2005-2558 affects MySQL versions before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta.

4

What are the potential exploitations of CVE-2005-2558?

CVE-2005-2558 allows remote authenticated users to execute arbitrary code by exploiting a stack-based buffer overflow.

5

Are there any workarounds for CVE-2005-2558?

There are no recommended workarounds for CVE-2005-2558; upgrading the software is the best mitigation measure.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203