Package : mysql-dfsg-4.1 Vulnerability : several Problem type : remote Debian-specific: no CVE IDs : CVE-2006-0903 CVE-2006-1516 CVE-2006-1517 CVE-2006-1518 CERT advisory : VU#602457 BugTraq IDs : 16850 17780 Debian Bugs : 366043 366048 366162
Several vulnerabilities have been discovered in MySQL, a popular SQL database. The Common Vulnerabilities and Exposures Project identifies the following problems:
CVE-2006-0903
Improper handling of SQL queries containing the NULL character allow local users to bypass logging mechanisms.
CVE-2006-1516
Usernames without a trailing null byte allow remote attackers to read portions of memory.
CVE-2006-1517
A request with an incorrect packet length allows remote attackers to obtain sensitive information.
CVE-2006-1518
Specially crafted request packets with invalid length values allow the execution of arbitrary code.
The following vulnerability matrix shows which version of MySQL in which distribution has this problem fixed: