[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256369

 
 

909

 
 

199183

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2005-2558Date: (C)2005-08-16   (M)2023-12-22


Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.6
Exploit Score: 3.9
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
BID-14509
SECUNIA-17027
http://marc.info/?l=bugtraq&m=112354450412427&w=2
SECUNIA-20381
SUNALERT-236703
SECUNIA-29847
ADV-2008-1326
DSA-829
DSA-831
DSA-833
FLSA-2006:167803
MDKSA-2005:163
SCOSA-2006.18
SUSE-SR:2005:021
USN-180-1
USN-180-2
http://www.appsecinc.com/resources/alerts/mysql/2005-002.html
mysql-user-defined-function-bo(21737)

CPE    7
cpe:/a:mysql:mysql:4.1.0
cpe:/a:mysql:mysql:4.1.3
cpe:/a:mysql:mysql:4.1.10
cpe:/a:mysql:mysql:5.0.1
...

© SecPod Technologies