CVE-2005-2558

Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.
References
Link Resource
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt
http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html Patch Vendor Advisory
http://marc.info/?l=bugtraq&m=112354450412427&w=2
http://secunia.com/advisories/17027
http://secunia.com/advisories/20381
http://secunia.com/advisories/29847
http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1
http://www.appsecinc.com/resources/alerts/mysql/2005-002.html Patch Vendor Advisory
http://www.debian.org/security/2005/dsa-829
http://www.debian.org/security/2005/dsa-831
http://www.debian.org/security/2005/dsa-833
http://www.mandriva.com/security/advisories?name=MDKSA-2005:163
http://www.novell.com/linux/security/advisories/2005_21_sr.html
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html
http://www.securityfocus.com/bid/14509 Patch
http://www.vupen.com/english/advisories/2008/1326/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/21737
https://www.ubuntu.com/usn/usn-180-1/
https://www.ubuntu.com/usn/usn-180-2/
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt
http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html Patch Vendor Advisory
http://marc.info/?l=bugtraq&m=112354450412427&w=2
http://secunia.com/advisories/17027
http://secunia.com/advisories/20381
http://secunia.com/advisories/29847
http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1
http://www.appsecinc.com/resources/alerts/mysql/2005-002.html Patch Vendor Advisory
http://www.debian.org/security/2005/dsa-829
http://www.debian.org/security/2005/dsa-831
http://www.debian.org/security/2005/dsa-833
http://www.mandriva.com/security/advisories?name=MDKSA-2005:163
http://www.novell.com/linux/security/advisories/2005_21_sr.html
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html
http://www.securityfocus.com/bid/14509 Patch
http://www.vupen.com/english/advisories/2008/1326/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/21737
https://www.ubuntu.com/usn/usn-180-1/
https://www.ubuntu.com/usn/usn-180-2/
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*

History

20 Nov 2024, 23:59

Type Values Removed Values Added
References () ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt - () ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt -
References () http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html - Patch, Vendor Advisory () http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html - Patch, Vendor Advisory
References () http://marc.info/?l=bugtraq&m=112354450412427&w=2 - () http://marc.info/?l=bugtraq&m=112354450412427&w=2 -
References () http://secunia.com/advisories/17027 - () http://secunia.com/advisories/17027 -
References () http://secunia.com/advisories/20381 - () http://secunia.com/advisories/20381 -
References () http://secunia.com/advisories/29847 - () http://secunia.com/advisories/29847 -
References () http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1 - () http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1 -
References () http://www.appsecinc.com/resources/alerts/mysql/2005-002.html - Patch, Vendor Advisory () http://www.appsecinc.com/resources/alerts/mysql/2005-002.html - Patch, Vendor Advisory
References () http://www.debian.org/security/2005/dsa-829 - () http://www.debian.org/security/2005/dsa-829 -
References () http://www.debian.org/security/2005/dsa-831 - () http://www.debian.org/security/2005/dsa-831 -
References () http://www.debian.org/security/2005/dsa-833 - () http://www.debian.org/security/2005/dsa-833 -
References () http://www.mandriva.com/security/advisories?name=MDKSA-2005:163 - () http://www.mandriva.com/security/advisories?name=MDKSA-2005:163 -
References () http://www.novell.com/linux/security/advisories/2005_21_sr.html - () http://www.novell.com/linux/security/advisories/2005_21_sr.html -
References () http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html - () http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html -
References () http://www.securityfocus.com/bid/14509 - Patch () http://www.securityfocus.com/bid/14509 - Patch
References () http://www.vupen.com/english/advisories/2008/1326/references - () http://www.vupen.com/english/advisories/2008/1326/references -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/21737 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/21737 -
References () https://www.ubuntu.com/usn/usn-180-1/ - () https://www.ubuntu.com/usn/usn-180-1/ -
References () https://www.ubuntu.com/usn/usn-180-2/ - () https://www.ubuntu.com/usn/usn-180-2/ -

Information

Published : 2005-08-16 04:00

Updated : 2024-11-20 23:59


NVD link : CVE-2005-2558

Mitre link : CVE-2005-2558

CVE.ORG link : CVE-2005-2558


JSON object : View

Products Affected

mysql

  • mysql

oracle

  • mysql