CVE-2006-1516

Public PoC / Exploit (2)

Exploit-DBMySQL 4.1.18/5.0.20 - Local/Remote Information Leakage TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.

Affected Products (71)

mysql · mysqlvulnerable

oracle · mysqlvulnerable

...and 21 more

References (20)

http://bugs.debian.org/365938

http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html

Patch

http://docs.info.apple.com/article.html?artnum=305214

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html

http://secunia.com/advisories/19929

PatchVendor Advisory

http://secunia.com/advisories/20002

http://secunia.com/advisories/20073

http://secunia.com/advisories/20076

http://secunia.com/advisories/20223

http://secunia.com/advisories/20241

http://secunia.com/advisories/20253

http://secunia.com/advisories/20333

http://secunia.com/advisories/20424

http://secunia.com/advisories/20457

http://secunia.com/advisories/20625

http://secunia.com/advisories/20762

http://secunia.com/advisories/24479

http://secunia.com/advisories/29847

http://securityreason.com/securityalert/840