Vulnerability Description
Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mysql | Mysql | 4.1.0 |
| Oracle | Mysql | 4.0.0 |
References
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.htmlPatchVendor Advisory
- http://marc.info/?l=bugtraq&m=112354450412427&w=2
- http://secunia.com/advisories/17027
- http://secunia.com/advisories/20381
- http://secunia.com/advisories/29847
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1
- http://www.appsecinc.com/resources/alerts/mysql/2005-002.htmlPatchVendor Advisory
- http://www.debian.org/security/2005/dsa-829
- http://www.debian.org/security/2005/dsa-831
- http://www.debian.org/security/2005/dsa-833
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:163
- http://www.novell.com/linux/security/advisories/2005_21_sr.html
- http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html
- http://www.securityfocus.com/bid/14509Patch
FAQ
What is CVE-2005-2558?
CVE-2005-2558 is a vulnerability with a CVSS score of 4.6 (MEDIUM). Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions t...
How severe is CVE-2005-2558?
CVE-2005-2558 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-2558?
Check the references section above for vendor advisories and patch information. Affected products include: Mysql Mysql, Oracle Mysql.