CVE-2006-1516

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 36.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-05 · updated 2026-06-16

Description

The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.

Affected products

Mysql: 4.1.0, 4.1.3, 4.1.8, 4.1.10, 4.1.12, 4.1.13 (+11)
MySQL Server: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 (+48)

References

http://bugs.debian.org/365938
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html
http://docs.info.apple.com/article.html?artnum=305214
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html
http://secunia.com/advisories/19929
http://secunia.com/advisories/20002
http://secunia.com/advisories/20073
http://secunia.com/advisories/20076
http://secunia.com/advisories/20223
http://secunia.com/advisories/20241
http://secunia.com/advisories/20253

Get alerted when CVE-2006-1516 or the next vulnerability affects your stack