Package : mysql Vulnerability : several Problem type : remote Debian-specific: no CVE IDs : CVE-2006-0903 CVE-2006-1516 CVE-2006-1517 CVE-2006-1518 BugTraq ID : 16850 17780 Debian Bugs : 366044 366049 366163
Several vulnerabilities have been discovered in MySQL, a popular SQL database. The Common Vulnerabilities and Exposures Project identifies the following problems:
Improper handling of SQL queries containing the NULL character allow local users to bypass logging mechanisms.
Usernames without a trailing null byte allow remote attackers to read portions of memory.
A request with an incorrect packet length allows remote attackers to obtain sensitive information.
Specially crafted request packets with invalid length values allow the execution of arbitrary code.
The following vulnerability matrix shows which version of MySQL in which distribution has this problem fixed: