NVD

Id
68247  
Name
CVE-2005-2558  
Description
Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-08-16  
Modified Date
2017-07-10  
Seq
2005-2558  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
352807 68247 CVE-2005-2558 SCOSA-2006.18  View
352808 68247 CVE-2005-2558 20050808 [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions  View
352809 68247 CVE-2005-2558 20050808 [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions  View
352810 68247 CVE-2005-2558 236703  View
352811 68247 CVE-2005-2558 http://www.appsecinc.com/resources/alerts/mysql/2005-002.html  View
352812 68247 CVE-2005-2558 DSA-829  View
352813 68247 CVE-2005-2558 DSA-831  View
352814 68247 CVE-2005-2558 DSA-833  View
352815 68247 CVE-2005-2558 MDKSA-2005:163  View
352816 68247 CVE-2005-2558 SUSE-SR:2005:021  View
352817 68247 CVE-2005-2558 FLSA-2006:167803  View
352818 68247 CVE-2005-2558 14509  View
352819 68247 CVE-2005-2558 ADV-2008-1326  View
352820 68247 CVE-2005-2558 mysql-user-defined-function-bo(21737)  View
352821 68247 CVE-2005-2558 USN-180-1  View
352822 68247 CVE-2005-2558 USN-180-2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62264 JVNDB-2005-000466 MySQL の init_syms() 関数におけるバッファオーバーフローの脆弱性 MySQL の UDF の作成時に使用される init_syms() 関数において、CREATE FUNCTION あるいは DROP FUNCTION で指定した function_name フィールドに対するチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-2558 13762 CVE-2005-2558 68247 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000466.html 2005-08-03 2008-05-09 View