CVE-2006-1517: Medium severity mysql mysql vulnerability
sqlparse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COMTABLEDUMP request with an incorrect packet length, which includes portions of memory in an error message.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1517?
CVE-2006-1517 is considered a moderate severity vulnerability due to its ability to expose sensitive information.
How do I fix CVE-2006-1517?
The remediation for CVE-2006-1517 is to upgrade MySQL to version 4.1.19 or later, or 5.0.21 or later.
What software versions are affected by CVE-2006-1517?
CVE-2006-1517 affects MySQL versions 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20.
Can CVE-2006-1517 be exploited remotely?
Yes, CVE-2006-1517 can be exploited remotely by attackers using a COM_TABLE_DUMP request.
What type of information can be leaked due to CVE-2006-1517?
CVE-2006-1517 can leak sensitive information contained in memory, such as portions of error messages.