CVE-2006-1517
published 2006-05-05CVE-2006-1517: sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a…
PriorityP416medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
4.97%
91.2th percentile
sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.
Affected
67 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_redhat5.0MEDIUM
vendor_ubuntu5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
MySQL vulnerabilities
vendor_ubuntu·2006-05-08·CVSS 5.0
CVE-2006-1516 [MEDIUM] MySQL vulnerabilities
Title: MySQL vulnerabilities
Summary: MySQL vulnerabilities
Stefano Di Paola discovered an information leak in the login packet
parser. By sending a specially crafted malformed login packet, a
remote attacker could exploit this to read a random piece of memory,
which could potentially reveal sensitive data. (CVE-2006-1516)
Stefano Di Paola also found a similar information leak in the parser
for the COM_TABLE_DUMP request. (CVE-2006-1517)
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
security flaw
vendor_redhat·2006-05-02·CVSS 5.0
CVE-2006-1517 [MEDIUM] security flaw
security flaw
sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.
GHSA
GHSA-mj77-c683-gmx7: sql_parse
ghsa_unreviewed·2022-05-01
CVE-2006-1517 [MEDIUM] GHSA-mj77-c683-gmx7: sql_parse
sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2006-1517 security flaw
bugzilla·2018-08-16·CVSS 5.0
CVE-2006-1517 [MEDIUM] CVE-2006-1517 security flaw
CVE-2006-1517 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.
Bugzilla
CVE-2006-1517 Mysql information leak
bugzilla·2006-05-05·CVSS 5.0
CVE-2006-1517 [MEDIUM] CVE-2006-1517 Mysql information leak
CVE-2006-1517 Mysql information leak
+++ This bug was initially created as a clone of Bug #190743 +++
Mysql information leak
A bug was found in mysql which can leak a small amount of unallocated
memory to an authenticated client.
More information can be found here:
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html
http://www.wisec.it/vulns.php?page=8
This issue should also affect FC4
Discussion:
5.0.21 is pushed into FC5, and 4.1.19 into FC4.
Bugzilla
CVE-2006-1517 Mysql information leak
bugzilla·2006-05-04·CVSS 5.0
CVE-2006-1517 [MEDIUM] CVE-2006-1517 Mysql information leak
CVE-2006-1517 Mysql information leak
Mysql information leak
A bug was found in mysql which can leak a small amount of unallocated
memory to an authenticated client.
More information can be found here:
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html
http://www.wisec.it/vulns.php?page=8
Discussion:
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.
http://rhn.redhat.com/errata/RHSA-2006-0544.html
Bugzilla
CVE-2006-0903 Mysql multiple vulnerabilities (
bugzilla·2006-04-07·CVSS 4.6
CVE-2006-0903 [MEDIUM] CVE-2006-0903 Mysql multiple vulnerabilities (
CVE-2006-0903 Mysql multiple vulnerabilities (
+++ This bug was initially created as a clone of Bug #183261 +++
Mysql log file obfuscation
http://secunia.com/advisories/19034
The following text is from tgl:
Yeah, problem confirmed locally: the query log message is truncated,
060227 11:15:47 6 Connect root@localhost on test
6 Query /* x */ select 2+2
6 Quit
060227 11:16:24 7 Connect root@localhost on test
7 Query /*
7 Quit
The report is perhaps deliberately obscure: you can *not* exploit this
through mysql_query() because it expects a null-terminated string
anyway. But you can exploit it through mysql_real_query() which takes
a pointer and count.
I'd class the severity as pretty low, since all it allows is hiding
some traces of an attack after the attacker has already broken into
th
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.htmlhttp://docs.info.apple.com/article.html?artnum=305214http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlhttp://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.htmlhttp://secunia.com/advisories/19929http://secunia.com/advisories/20002http://secunia.com/advisories/20073http://secunia.com/advisories/20076http://secunia.com/advisories/20223http://secunia.com/advisories/20241http://secunia.com/advisories/20253http://secunia.com/advisories/20333http://secunia.com/advisories/20424http://secunia.com/advisories/20457http://secunia.com/advisories/20625http://secunia.com/advisories/20762http://secunia.com/advisories/24479http://secunia.com/advisories/29847http://securityreason.com/securityalert/839http://securitytracker.com/id?1016016http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1http://www.debian.org/security/2006/dsa-1071http://www.debian.org/security/2006/dsa-1073http://www.debian.org/security/2006/dsa-1079http://www.gentoo.org/security/en/glsa/glsa-200605-13.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2006:084http://www.novell.com/linux/security/advisories/2006-06-02.htmlhttp://www.osvdb.org/25228http://www.redhat.com/support/errata/RHSA-2006-0544.htmlhttp://www.securityfocus.com/archive/1/432734/100/0/threadedhttp://www.securityfocus.com/archive/1/434164/100/0/threadedhttp://www.securityfocus.com/bid/17780http://www.trustix.org/errata/2006/0028http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlhttp://www.vupen.com/english/advisories/2006/1633http://www.vupen.com/english/advisories/2007/0930http://www.vupen.com/english/advisories/2008/1326/referenceshttp://www.wisec.it/vulns.php?page=8https://exchange.xforce.ibmcloud.com/vulnerabilities/26228https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11036https://usn.ubuntu.com/283-1/http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.htmlhttp://docs.info.apple.com/article.html?artnum=305214http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlhttp://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.htmlhttp://secunia.com/advisories/19929http://secunia.com/advisories/20002http://secunia.com/advisories/20073http://secunia.com/advisories/20076http://secunia.com/advisories/20223http://secunia.com/advisories/20241http://secunia.com/advisories/20253http://secunia.com/advisories/20333http://secunia.com/advisories/20424http://secunia.com/advisories/20457http://secunia.com/advisories/20625http://secunia.com/advisories/20762http://secunia.com/advisories/24479http://secunia.com/advisories/29847http://securityreason.com/securityalert/839http://securitytracker.com/id?1016016http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1http://www.debian.org/security/2006/dsa-1071http://www.debian.org/security/2006/dsa-1073http://www.debian.org/security/2006/dsa-1079http://www.gentoo.org/security/en/glsa/glsa-200605-13.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2006:084http://www.novell.com/linux/security/advisories/2006-06-02.htmlhttp://www.osvdb.org/25228http://www.redhat.com/support/errata/RHSA-2006-0544.htmlhttp://www.securityfocus.com/archive/1/432734/100/0/threadedhttp://www.securityfocus.com/archive/1/434164/100/0/threadedhttp://www.securityfocus.com/bid/17780http://www.trustix.org/errata/2006/0028http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlhttp://www.vupen.com/english/advisories/2006/1633http://www.vupen.com/english/advisories/2007/0930http://www.vupen.com/english/advisories/2008/1326/referenceshttp://www.wisec.it/vulns.php?page=8https://exchange.xforce.ibmcloud.com/vulnerabilities/26228https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11036https://usn.ubuntu.com/283-1/
2006-05-05
Published