CVE-2006-3486: Buffer Overflow

Published Jul 10, 2006

Updated

DISPUTED Off-by-one buffer overflow in the Instanceoptions::completeinitialization function in instanceoptions.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors, which triggers the overflow when the convertdirname function is called. NOTE: the vendor has disputed this issue via e-mail to CVE, saying that it is only exploitable when the user has access to the configuration file or the Instance Manager daemon. Due to intended functionality, this level of access would already allow the user to disrupt program operation, so this does not cross security boundaries and is not a vulnerability.

Affected Software

34 affected components

MySQL mysql=5.0.0

MySQL mysql=5.0.1

MySQL mysql=5.0.2

MySQL mysql=5.0.3

MySQL mysql=5.0.4

MySQL mysql=5.0.5

MySQL mysql=5.0.10

MySQL mysql=5.0.15

MySQL mysql=5.0.16

MySQL mysql=5.0.17

MySQL mysql=5.0.20

MySQL mysql=5.1.5

Oracle MySQL=5.0.6

Oracle MySQL=5.0.7

Oracle MySQL=5.0.8

Oracle MySQL=5.0.9

Oracle MySQL=5.0.11

Oracle MySQL=5.0.12

Oracle MySQL=5.0.13

Oracle MySQL=5.0.14

Oracle MySQL=5.0.18

Oracle MySQL=5.0.19

Oracle MySQL=5.0.21

Oracle MySQL=5.0.22

Oracle MySQL=5.1.1

Oracle MySQL=5.1.2

Oracle MySQL=5.1.3

Oracle MySQL=5.1.4

Oracle MySQL=5.1.6

Oracle MySQL=5.1.7

Oracle MySQL=5.1.8

Oracle MySQL=5.1.9

Oracle MySQL=5.1.10

Oracle MySQL=5.1.11

Event History

Jul 10, 2006

CVE Published

via NVD·09:05 PM

Disputed

09:05 PM

Jul 11, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3486?

CVE-2006-3486 is classified as a moderate severity vulnerability that may lead to a denial of service.

How do I fix CVE-2006-3486?

To fix CVE-2006-3486, upgrade MySQL to version 5.0.23 or later for the 5.0 branch and 5.1.12 or later for the 5.1 branch.

What versions of MySQL are affected by CVE-2006-3486?

CVE-2006-3486 affects MySQL versions before 5.0.23 and versions before 5.1.12.

What type of vulnerability is CVE-2006-3486?

CVE-2006-3486 is an off-by-one buffer overflow vulnerability in the Instance Manager of MySQL.

Can CVE-2006-3486 allow remote attacks?

CVE-2006-3486 is said to allow local users to potentially cause a denial of service via unspecified vectors.