NVD脆弱性詳細

CVE-2005-2558

概要	Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.
公表日	2005年8月16日13:00
登録日	2021年1月29日17:59
最終更新日	2019年12月18日2:12

CVSS2.0 : MEDIUM
スコア	4.6
ベクター	AV:L/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	はい
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:mysql:mysql:4.1.0:::::::*
cpe:2.3:a:mysql:mysql:4.1.3:::::::*
cpe:2.3:a:mysql:mysql:4.1.10:::::::*
cpe:2.3:a:mysql:mysql:5.0.1:::::::*
cpe:2.3:a:mysql:mysql:5.0.2:::::::*
cpe:2.3:a:mysql:mysql:5.0.3:::::::*
cpe:2.3:a:mysql:mysql:5.0.4:::::::*
cpe:2.3:a:oracle:mysql:4.0.0:::::::*
cpe:2.3:a:oracle:mysql:4.0.1:::::::*
cpe:2.3:a:oracle:mysql:4.0.2:::::::*
cpe:2.3:a:oracle:mysql:4.0.3:::::::*
cpe:2.3:a:oracle:mysql:4.0.4:::::::*
cpe:2.3:a:oracle:mysql:4.0.5:::::::*
cpe:2.3:a:oracle:mysql:4.0.5a:::::::*
cpe:2.3:a:oracle:mysql:4.0.6:::::::*
cpe:2.3:a:oracle:mysql:4.0.7:::::::*
cpe:2.3:a:oracle:mysql:4.0.7:gamma::::::
cpe:2.3:a:oracle:mysql:4.0.8:::::::*
cpe:2.3:a:oracle:mysql:4.0.8:gamma::::::
cpe:2.3:a:oracle:mysql:4.0.9:::::::*
cpe:2.3:a:oracle:mysql:4.0.9:gamma::::::
cpe:2.3:a:oracle:mysql:4.0.10:::::::*
cpe:2.3:a:oracle:mysql:4.0.11:::::::*
cpe:2.3:a:oracle:mysql:4.0.11:gamma::::::
cpe:2.3:a:oracle:mysql:4.0.12:::::::*
cpe:2.3:a:oracle:mysql:4.0.13:::::::*
cpe:2.3:a:oracle:mysql:4.0.14:::::::*
cpe:2.3:a:oracle:mysql:4.0.15:::::::*
cpe:2.3:a:oracle:mysql:4.0.18:::::::*
cpe:2.3:a:oracle:mysql:4.0.20:::::::*
cpe:2.3:a:oracle:mysql:4.0.21:::::::*
cpe:2.3:a:oracle:mysql:4.0.24:::::::*
cpe:2.3:a:oracle:mysql:4.1.0:alpha::::::
cpe:2.3:a:oracle:mysql:4.1.2:alpha::::::
cpe:2.3:a:oracle:mysql:4.1.3:beta::::::
cpe:2.3:a:oracle:mysql:4.1.4:::::::*
cpe:2.3:a:oracle:mysql:4.1.5:::::::*
cpe:2.3:a:oracle:mysql:5.0.0:alpha::::::

関連情報、対策とツール

No	URL	refsource	タグ
1	ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt	SCO
2	http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html	FULLDISC	Patch Vendor Advisory
3	http://marc.info/?l=bugtraq&m=112354450412427&w=2	BUGTRAQ
4	http://secunia.com/advisories/17027	SECUNIA
5	http://secunia.com/advisories/20381	SECUNIA
6	http://secunia.com/advisories/29847	SECUNIA
7	http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1	SUNALERT
8	http://www.appsecinc.com/resources/alerts/mysql/2005-002.html	MISC	Patch Vendor Advisory
9	http://www.debian.org/security/2005/dsa-829	DEBIAN
10	http://www.debian.org/security/2005/dsa-831	DEBIAN
11	http://www.debian.org/security/2005/dsa-833	DEBIAN
12	http://www.mandriva.com/security/advisories?name=MDKSA-2005:163	MANDRIVA
13	http://www.novell.com/linux/security/advisories/2005_21_sr.html	SUSE
14	http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html	FEDORA
15	http://www.securityfocus.com/bid/14509	BID	Patch
16	http://www.vupen.com/english/advisories/2008/1326/references	VUPEN
17	https://exchange.xforce.ibmcloud.com/vulnerabilities/21737	XF
18	https://www.ubuntu.com/usn/usn-180-1/	UBUNTU
19	https://www.ubuntu.com/usn/usn-180-2/	UBUNTU

共通脆弱性一覧

構成1	以上	以下	より上	未満
cpe:2.3:a:mysql:mysql:4.1.0:::::::*
cpe:2.3:a:mysql:mysql:4.1.3:::::::*
cpe:2.3:a:mysql:mysql:4.1.10:::::::*
cpe:2.3:a:mysql:mysql:5.0.1:::::::*
cpe:2.3:a:mysql:mysql:5.0.2:::::::*
cpe:2.3:a:mysql:mysql:5.0.3:::::::*
cpe:2.3:a:mysql:mysql:5.0.4:::::::*
cpe:2.3:a:oracle:mysql:4.0.0:::::::*
cpe:2.3:a:oracle:mysql:4.0.1:::::::*
cpe:2.3:a:oracle:mysql:4.0.2:::::::*
cpe:2.3:a:oracle:mysql:4.0.3:::::::*
cpe:2.3:a:oracle:mysql:4.0.4:::::::*
cpe:2.3:a:oracle:mysql:4.0.5:::::::*
cpe:2.3:a:oracle:mysql:4.0.5a:::::::*
cpe:2.3:a:oracle:mysql:4.0.6:::::::*
cpe:2.3:a:oracle:mysql:4.0.7:::::::*
cpe:2.3:a:oracle:mysql:4.0.7:gamma::::::
cpe:2.3:a:oracle:mysql:4.0.8:::::::*
cpe:2.3:a:oracle:mysql:4.0.8:gamma::::::
cpe:2.3:a:oracle:mysql:4.0.9:::::::*
cpe:2.3:a:oracle:mysql:4.0.9:gamma::::::
cpe:2.3:a:oracle:mysql:4.0.10:::::::*
cpe:2.3:a:oracle:mysql:4.0.11:::::::*
cpe:2.3:a:oracle:mysql:4.0.11:gamma::::::
cpe:2.3:a:oracle:mysql:4.0.12:::::::*
cpe:2.3:a:oracle:mysql:4.0.13:::::::*
cpe:2.3:a:oracle:mysql:4.0.14:::::::*
cpe:2.3:a:oracle:mysql:4.0.15:::::::*
cpe:2.3:a:oracle:mysql:4.0.18:::::::*
cpe:2.3:a:oracle:mysql:4.0.20:::::::*
cpe:2.3:a:oracle:mysql:4.0.21:::::::*
cpe:2.3:a:oracle:mysql:4.0.24:::::::*
cpe:2.3:a:oracle:mysql:4.1.0:alpha::::::
cpe:2.3:a:oracle:mysql:4.1.2:alpha::::::
cpe:2.3:a:oracle:mysql:4.1.3:beta::::::
cpe:2.3:a:oracle:mysql:4.1.4:::::::*
cpe:2.3:a:oracle:mysql:4.1.5:::::::*
cpe:2.3:a:oracle:mysql:5.0.0:alpha::::::