CVE-2005-2558

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-08-16 · updated 2026-06-16

Description

Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.

Affected products

Mysql: 4.1.0, 4.1.3, 4.1.10, 5.0.1, 5.0.2, 5.0.3 (+1)
MySQL Server: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 (+25)

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html
http://marc.info/?l=bugtraq&m=112354450412427&w=2
http://secunia.com/advisories/17027
http://secunia.com/advisories/20381
http://secunia.com/advisories/29847
http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1
http://www.appsecinc.com/resources/alerts/mysql/2005-002.html
http://www.debian.org/security/2005/dsa-829
http://www.debian.org/security/2005/dsa-831
http://www.debian.org/security/2005/dsa-833
http://www.mandriva.com/security/advisories?name=MDKSA-2005:163

Get alerted when CVE-2005-2558 or the next vulnerability affects your stack