CVE-2006-1518: Buffer Overflow
Published May 5, 2006
·Updated
Buffer overflow in the opentable function in sqlbase.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COMTABLEDUMP packets with invalid length values.
Affected Software
22 affected components
MySQL mysql=5.0.1
MySQL mysql=5.0.2
MySQL mysql=5.0.3
MySQL mysql=5.0.4
MySQL mysql=5.0.5
MySQL mysql=5.0.10
MySQL mysql=5.0.15
MySQL mysql=5.0.16
MySQL mysql=5.0.17
MySQL mysql=5.0.20
Oracle MySQL=5.0.0-alpha
Oracle MySQL=5.0.3-beta
Oracle MySQL=5.0.6
Oracle MySQL=5.0.7
Oracle MySQL=5.0.8
Oracle MySQL=5.0.9
Oracle MySQL=5.0.11
Oracle MySQL=5.0.12
Oracle MySQL=5.0.13
Oracle MySQL=5.0.14
Oracle MySQL=5.0.18
Oracle MySQL=5.0.19
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
May 5, 2006
CVE Published
12:46 PM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1518?
CVE-2006-1518 is categorized as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2006-1518?
To mitigate CVE-2006-1518, upgrade to MySQL version 5.0.21 or later.
3
Which versions of MySQL are affected by CVE-2006-1518?
CVE-2006-1518 affects MySQL versions 5.0.1 through 5.0.20.
4
Can CVE-2006-1518 be exploited remotely?
Yes, CVE-2006-1518 can be exploited by remote attackers through specially crafted packets.
5
What component of MySQL is impacted by CVE-2006-1518?
The vulnerability in CVE-2006-1518 specifically affects the open_table function in sql_base.cc.