Executive Summary

Informations
Name CVE-2006-1518 First vendor Publication 2006-05-05
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:P/I:P/A:P)
Cvss Base Score 6.5 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 8 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1518

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 22

OpenVAS Exploits

Date Description
2008-09-04 Name : FreeBSD Ports: mysql-server
File : nvt/freebsd_mysql-server10.nasl
2008-09-04 Name : FreeBSD Ports: mysql-server
File : nvt/freebsd_mysql-server8.nasl
2008-01-17 Name : Debian Security Advisory DSA 1071-1 (mysql)
File : nvt/deb_1071_1.nasl
2008-01-17 Name : Debian Security Advisory DSA 1073-1 (mysql-dfsg-4.1)
File : nvt/deb_1073_1.nasl
2008-01-17 Name : Debian Security Advisory DSA 1079-1 (mysql-dfsg)
File : nvt/deb_1079_1.nasl
0000-00-00 Name : Slackware Advisory SSA:2006-129-02 mysql
File : nvt/esoft_slk_ssa_2006_129_02.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
25227 MySQL COM_TABLE_DUMP Packet Overflow

Snort® IPS/IDS

Date Description
2014-01-10 MySQL COM_TABLE_DUMP Function Stack Overflow attempt
RuleID : 11619 - Revision : 7 - Type : SERVER-MYSQL

Nessus® Vulnerability Scanner

Date Description
2011-11-18 Name : The remote database server is affected by multiple vulnerabilities.
File : mysql_5_0_21.nasl - Type : ACT_GATHER_INFO
2007-11-10 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-306-1.nasl - Type : ACT_GATHER_INFO
2007-10-17 Name : The remote openSUSE host is missing a security update.
File : suse_mysql-1312.nasl - Type : ACT_GATHER_INFO
2007-02-18 Name : The remote host is missing a vendor-supplied security patch
File : suse_SA_2006_036.nasl - Type : ACT_GATHER_INFO
2007-01-17 Name : The remote Fedora Core host is missing a security update.
File : fedora_2006-553.nasl - Type : ACT_GATHER_INFO
2007-01-17 Name : The remote Fedora Core host is missing a security update.
File : fedora_2006-554.nasl - Type : ACT_GATHER_INFO
2006-10-14 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1071.nasl - Type : ACT_GATHER_INFO
2006-10-14 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1073.nasl - Type : ACT_GATHER_INFO
2006-10-14 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1079.nasl - Type : ACT_GATHER_INFO
2006-06-05 Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_4913886ce87511dab9f400123ffe8333.nasl - Type : ACT_GATHER_INFO
2006-05-13 Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2006-129-02.nasl - Type : ACT_GATHER_INFO
2006-05-13 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_a8d8713edc8311daa22b000c6ec775d9.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html
http://secunia.com/advisories/19929
http://secunia.com/advisories/20241
http://secunia.com/advisories/20253
http://secunia.com/advisories/20333
http://secunia.com/advisories/20457
http://secunia.com/advisories/20762
http://securityreason.com/securityalert/839
http://securitytracker.com/id?1016016
http://www.debian.org/security/2006/dsa-1071
http://www.debian.org/security/2006/dsa-1073
http://www.debian.org/security/2006/dsa-1079
http://www.kb.cert.org/vuls/id/602457
http://www.novell.com/linux/security/advisories/2006-06-02.html
http://www.securityfocus.com/archive/1/432734/100/0/threaded
http://www.securityfocus.com/bid/17780
http://www.vupen.com/english/advisories/2006/1633
http://www.wisec.it/vulns.php?page=8
https://exchange.xforce.ibmcloud.com/vulnerabilities/26232
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
Date Informations
2024-11-28 23:20:33
  • Multiple Updates
2024-11-28 12:08:36
  • Multiple Updates
2024-08-02 12:04:17
  • Multiple Updates
2024-08-02 01:01:53
  • Multiple Updates
2024-02-02 01:04:00
  • Multiple Updates
2024-02-01 12:01:53
  • Multiple Updates
2023-09-05 12:03:45
  • Multiple Updates
2023-09-05 01:01:44
  • Multiple Updates
2023-09-02 12:03:48
  • Multiple Updates
2023-09-02 01:01:45
  • Multiple Updates
2023-08-12 12:04:28
  • Multiple Updates
2023-08-12 01:01:45
  • Multiple Updates
2023-08-11 12:03:52
  • Multiple Updates
2023-08-11 01:01:47
  • Multiple Updates
2023-08-06 12:03:39
  • Multiple Updates
2023-08-06 01:01:45
  • Multiple Updates
2023-08-04 12:03:43
  • Multiple Updates
2023-08-04 01:01:48
  • Multiple Updates
2023-07-14 12:03:43
  • Multiple Updates
2023-07-14 01:01:47
  • Multiple Updates
2023-03-29 01:03:58
  • Multiple Updates
2023-03-28 12:01:51
  • Multiple Updates
2022-10-11 12:03:18
  • Multiple Updates
2022-10-11 01:01:38
  • Multiple Updates
2021-05-04 12:03:51
  • Multiple Updates
2021-04-22 01:04:24
  • Multiple Updates
2020-05-23 00:17:35
  • Multiple Updates
2018-10-18 21:20:02
  • Multiple Updates
2017-07-20 09:23:28
  • Multiple Updates
2016-04-26 14:27:24
  • Multiple Updates
2014-02-17 10:35:16
  • Multiple Updates
2014-01-19 21:23:12
  • Multiple Updates
2013-05-11 10:52:54
  • Multiple Updates