NetSight
IP …
medium6.5Public exploit code

CVE-2006-1518

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TA…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

Affected products

VendorProductAffected versions
MysqlMysql
Versions 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.10
OracleMysql
Versions 5.0.0, 5.0.3, 5.0.6, 5.0.7, 5.0.8, 5.0.9

References