10/7/2006
7/8/2024
CVE-2006-3486: Buffer Overflow
First published: Mon Jul 10 2006(Updated: )
** DISPUTED ** Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors, which triggers the overflow when the convert_dirname function is called. NOTE: the vendor has disputed this issue via e-mail to CVE, saying that it is only exploitable when the user has access to the configuration file or the Instance Manager daemon. Due to intended functionality, this level of access would already allow the user to disrupt program operation, so this does not cross security boundaries and is not a vulnerability.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|
MySQL MySQL | =5.0.0 | |
MySQL MySQL | =5.0.1 | |
MySQL MySQL | =5.0.2 | |
MySQL MySQL | =5.0.3 | |
MySQL MySQL | =5.0.4 | |
MySQL MySQL | =5.0.5 | |
MySQL MySQL | =5.0.10 | |
MySQL MySQL | =5.0.15 | |
MySQL MySQL | =5.0.16 | |
MySQL MySQL | =5.0.17 | |
MySQL MySQL | =5.0.20 | |
MySQL MySQL | =5.1.5 | |
Oracle MySQL | =5.0.6 | |
Oracle MySQL | =5.0.7 | |
Oracle MySQL | =5.0.8 | |
Oracle MySQL | =5.0.9 | |
Oracle MySQL | =5.0.11 | |
Oracle MySQL | =5.0.12 | |
Oracle MySQL | =5.0.13 | |
Oracle MySQL | =5.0.14 | |
Oracle MySQL | =5.0.18 | |
Oracle MySQL | =5.0.19 | |
Oracle MySQL | =5.0.21 | |
Oracle MySQL | =5.0.22 | |
Oracle MySQL | =5.1.1 | |
Oracle MySQL | =5.1.2 | |
Oracle MySQL | =5.1.3 | |
Oracle MySQL | =5.1.4 | |
Oracle MySQL | =5.1.6 | |
Oracle MySQL | =5.1.7 | |
Oracle MySQL | =5.1.8 | |
Oracle MySQL | =5.1.9 | |
Oracle MySQL | =5.1.10 | |
Oracle MySQL | =5.1.11 | |
| =5.0.0 | |
| =5.0.1 | |
| =5.0.2 | |
| =5.0.3 | |
| =5.0.4 | |
| =5.0.5 | |
| =5.0.10 | |
| =5.0.15 | |
| =5.0.16 | |
| =5.0.17 | |
| =5.0.20 | |
| =5.1.5 | |
| =5.0.6 | |
| =5.0.7 | |
| =5.0.8 | |
| =5.0.9 | |
| =5.0.11 | |
| =5.0.12 | |
| =5.0.13 | |
| =5.0.14 | |
| =5.0.18 | |
| =5.0.19 | |
| =5.0.21 | |
| =5.0.22 | |
| =5.1.1 | |
| =5.1.2 | |
| =5.1.3 | |
| =5.1.4 | |
| =5.1.6 | |
| =5.1.7 | |
| =5.1.8 | |
| =5.1.9 | |
| =5.1.10 | |
| =5.1.11 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/author
- agent/type
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- agent/references
- agent/weakness
- agent/severity
- agent/status
- agent/description
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- status/disputed
- vendor/mysql
- canonical/mysql mysql
- version/mysql mysql/5.0.0
- version/mysql mysql/5.0.1
- version/mysql mysql/5.0.2
- version/mysql mysql/5.0.3
- version/mysql mysql/5.0.4
- version/mysql mysql/5.0.5
- version/mysql mysql/5.0.10
- version/mysql mysql/5.0.15
- version/mysql mysql/5.0.16
- version/mysql mysql/5.0.17
- version/mysql mysql/5.0.20
- version/mysql mysql/5.1.5
- vendor/oracle
- canonical/oracle mysql
- version/oracle mysql/5.0.6
- version/oracle mysql/5.0.7
- version/oracle mysql/5.0.8
- version/oracle mysql/5.0.9
- version/oracle mysql/5.0.11
- version/oracle mysql/5.0.12
- version/oracle mysql/5.0.13
- version/oracle mysql/5.0.14
- version/oracle mysql/5.0.18
- version/oracle mysql/5.0.19
- version/oracle mysql/5.0.21
- version/oracle mysql/5.0.22
- version/oracle mysql/5.1.1
- version/oracle mysql/5.1.2
- version/oracle mysql/5.1.3
- version/oracle mysql/5.1.4
- version/oracle mysql/5.1.6
- version/oracle mysql/5.1.7
- version/oracle mysql/5.1.8
- version/oracle mysql/5.1.9
- version/oracle mysql/5.1.10
- version/oracle mysql/5.1.11
Contact
SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.coBy using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203