CVE-2006-1518

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

Affected Software

Name	Vendor	Start Version	End Version
Mysql	Mysql	5.0.1 (including)	5.0.1 (including)
Mysql	Mysql	5.0.2 (including)	5.0.2 (including)
Mysql	Mysql	5.0.3 (including)	5.0.3 (including)
Mysql	Mysql	5.0.4 (including)	5.0.4 (including)
Mysql	Mysql	5.0.5 (including)	5.0.5 (including)
Mysql	Mysql	5.0.10 (including)	5.0.10 (including)
Mysql	Mysql	5.0.15 (including)	5.0.15 (including)
Mysql	Mysql	5.0.16 (including)	5.0.16 (including)
Mysql	Mysql	5.0.17 (including)	5.0.17 (including)
Mysql	Mysql	5.0.20 (including)	5.0.20 (including)
Mysql	Oracle	5.0.0-alpha (including)	5.0.0-alpha (including)
Mysql	Oracle	5.0.3-beta (including)	5.0.3-beta (including)
Mysql	Oracle	5.0.6 (including)	5.0.6 (including)
Mysql	Oracle	5.0.7 (including)	5.0.7 (including)
Mysql	Oracle	5.0.8 (including)	5.0.8 (including)
Mysql	Oracle	5.0.9 (including)	5.0.9 (including)
Mysql	Oracle	5.0.11 (including)	5.0.11 (including)
Mysql	Oracle	5.0.12 (including)	5.0.12 (including)
Mysql	Oracle	5.0.13 (including)	5.0.13 (including)
Mysql	Oracle	5.0.14 (including)	5.0.14 (including)
Mysql	Oracle	5.0.18 (including)	5.0.18 (including)
Mysql	Oracle	5.0.19 (including)	5.0.19 (including)
Mysql-dfsg-5.0	Ubuntu	dapper	*
Mysql-dfsg-5.0	Ubuntu	devel	*
Mysql-dfsg-5.0	Ubuntu	edgy	*
Mysql-dfsg-5.0	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-1518
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References