CVE-2006-1518

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 38.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-05 · updated 2026-06-16

Description

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

Affected products

Mysql: 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.10 (+4)
MySQL Server: 5.0.0-alpha, 5.0.3-beta, 5.0.6, 5.0.7, 5.0.8, 5.0.9 (+6)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html
http://secunia.com/advisories/19929
http://secunia.com/advisories/20241
http://secunia.com/advisories/20253
http://secunia.com/advisories/20333
http://secunia.com/advisories/20457
http://secunia.com/advisories/20762
http://securityreason.com/securityalert/839
http://securitytracker.com/id?1016016
http://www.debian.org/security/2006/dsa-1071

Get alerted when CVE-2006-1518 or the next vulnerability affects your stack