CVE-2006-3486
Summary
| CVE | CVE-2006-3486 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-07-10 21:05:00 UTC |
| Updated | 2023-11-07 01:59:00 UTC |
| Description | ** DISPUTED ** Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors, which triggers the overflow when the convert_dirname function is called. NOTE: the vendor has disputed this issue via e-mail to CVE, saying that it is only exploitable when the user has access to the configuration file or the Instance Manager daemon. Due to intended functionality, this level of access would already allow the user to disrupt program operation, so this does not cross security boundaries and is not a vulnerability. |
Risk And Classification
Problem Types: CWE-189
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mysql | Mysql | 5.0.0 | All | All | All |
| Application | Mysql | Mysql | 5.0.1 | All | All | All |
| Application | Mysql | Mysql | 5.0.10 | All | All | All |
| Application | Mysql | Mysql | 5.0.15 | All | All | All |
| Application | Mysql | Mysql | 5.0.16 | All | All | All |
| Application | Mysql | Mysql | 5.0.17 | All | All | All |
| Application | Mysql | Mysql | 5.0.2 | All | All | All |
| Application | Mysql | Mysql | 5.0.20 | All | All | All |
| Application | Mysql | Mysql | 5.0.3 | All | All | All |
| Application | Mysql | Mysql | 5.0.4 | All | All | All |
| Application | Mysql | Mysql | 5.0.5 | All | All | All |
| Application | Mysql | Mysql | 5.1.5 | All | All | All |
| Application | Mysql | Mysql | 5.0.0 | All | All | All |
| Application | Mysql | Mysql | 5.0.1 | All | All | All |
| Application | Mysql | Mysql | 5.0.10 | All | All | All |
| Application | Mysql | Mysql | 5.0.15 | All | All | All |
| Application | Mysql | Mysql | 5.0.16 | All | All | All |
| Application | Mysql | Mysql | 5.0.17 | All | All | All |
| Application | Mysql | Mysql | 5.0.2 | All | All | All |
| Application | Mysql | Mysql | 5.0.20 | All | All | All |
| Application | Mysql | Mysql | 5.0.3 | All | All | All |
| Application | Mysql | Mysql | 5.0.4 | All | All | All |
| Application | Mysql | Mysql | 5.0.5 | All | All | All |
| Application | Mysql | Mysql | 5.1.5 | All | All | All |
| Application | Oracle | Mysql | 5.0.11 | All | All | All |
| Application | Oracle | Mysql | 5.0.12 | All | All | All |
| Application | Oracle | Mysql | 5.0.13 | All | All | All |
| Application | Oracle | Mysql | 5.0.14 | All | All | All |
| Application | Oracle | Mysql | 5.0.18 | All | All | All |
| Application | Oracle | Mysql | 5.0.19 | All | All | All |
| Application | Oracle | Mysql | 5.0.21 | All | All | All |
| Application | Oracle | Mysql | 5.0.22 | All | All | All |
| Application | Oracle | Mysql | 5.0.6 | All | All | All |
| Application | Oracle | Mysql | 5.0.7 | All | All | All |
| Application | Oracle | Mysql | 5.0.8 | All | All | All |
| Application | Oracle | Mysql | 5.0.9 | All | All | All |
| Application | Oracle | Mysql | 5.1.1 | All | All | All |
| Application | Oracle | Mysql | 5.1.10 | All | All | All |
| Application | Oracle | Mysql | 5.1.11 | All | All | All |
| Application | Oracle | Mysql | 5.1.2 | All | All | All |
| Application | Oracle | Mysql | 5.1.3 | All | All | All |
| Application | Oracle | Mysql | 5.1.4 | All | All | All |
| Application | Oracle | Mysql | 5.1.6 | All | All | All |
| Application | Oracle | Mysql | 5.1.7 | All | All | All |
| Application | Oracle | Mysql | 5.1.8 | All | All | All |
| Application | Oracle | Mysql | 5.1.9 | All | All | All |
| Application | Oracle | Mysql | 5.0.11 | All | All | All |
| Application | Oracle | Mysql | 5.0.12 | All | All | All |
| Application | Oracle | Mysql | 5.0.13 | All | All | All |
| Application | Oracle | Mysql | 5.0.14 | All | All | All |
| Application | Oracle | Mysql | 5.0.18 | All | All | All |
| Application | Oracle | Mysql | 5.0.19 | All | All | All |
| Application | Oracle | Mysql | 5.0.21 | All | All | All |
| Application | Oracle | Mysql | 5.0.22 | All | All | All |
| Application | Oracle | Mysql | 5.0.6 | All | All | All |
| Application | Oracle | Mysql | 5.0.7 | All | All | All |
| Application | Oracle | Mysql | 5.0.8 | All | All | All |
| Application | Oracle | Mysql | 5.0.9 | All | All | All |
| Application | Oracle | Mysql | 5.1.1 | All | All | All |
| Application | Oracle | Mysql | 5.1.10 | All | All | All |
| Application | Oracle | Mysql | 5.1.11 | All | All | All |
| Application | Oracle | Mysql | 5.1.2 | All | All | All |
| Application | Oracle | Mysql | 5.1.3 | All | All | All |
| Application | Oracle | Mysql | 5.1.4 | All | All | All |
| Application | Oracle | Mysql | 5.1.6 | All | All | All |
| Application | Oracle | Mysql | 5.1.7 | All | All | All |
| Application | Oracle | Mysql | 5.1.8 | All | All | All |
| Application | Oracle | Mysql | 5.1.9 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail - OVH | VUPEN | www.vupen.com | Vendor Advisory |
| MySQL AB :: MySQL 5.0 Reference Manual :: G.1.6 Changes in release 5.0.23 (Not released) | MISC | dev.mysql.com | |
| MySQL Bugs: #20622: Buffer overwrite in instance manager causes im crash | MISC | bugs.mysql.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| MySQL AB :: MySQL 5.1 Reference Manual :: E.1.4 Changes in release 5.1.12 (24 October 2006) | MISC | dev.mysql.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2006-07-19 | Mark J Cox | We do not consider this issue to have security implications, and therefore have no plans to issue MySQL updates for Red Hat Enterprise Linux 2.1, 3, or 4 to correct this issue. |
There are currently no legacy QID mappings associated with this CVE.