NVD脆弱性詳細

CVE-2006-2753

概要	SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.
公表日	2006年6月2日2:02
登録日	2021年1月29日15:38
最終更新日	2019年12月18日5:16

CVSS2.0 : HIGH
スコア	7.5
ベクター	AV:N/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	はい
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:mysql:mysql:4.1.0:::::::*
cpe:2.3:a:mysql:mysql:4.1.2:::::::*
cpe:2.3:a:mysql:mysql:4.1.3:::::::*
cpe:2.3:a:mysql:mysql:4.1.8:::::::*
cpe:2.3:a:mysql:mysql:4.1.10:::::::*
cpe:2.3:a:mysql:mysql:4.1.12:::::::*
cpe:2.3:a:mysql:mysql:4.1.13:::::::*
cpe:2.3:a:mysql:mysql:4.1.14:::::::*
cpe:2.3:a:mysql:mysql:4.1.15:::::::*
cpe:2.3:a:mysql:mysql:5.0.0:::::::*
cpe:2.3:a:mysql:mysql:5.0.1:::::::*
cpe:2.3:a:mysql:mysql:5.0.2:::::::*
cpe:2.3:a:mysql:mysql:5.0.3:::::::*
cpe:2.3:a:mysql:mysql:5.0.4:::::::*
cpe:2.3:a:mysql:mysql:5.0.5:::::::*
cpe:2.3:a:mysql:mysql:5.0.10:::::::*
cpe:2.3:a:mysql:mysql:5.0.15:::::::*
cpe:2.3:a:mysql:mysql:5.0.16:::::::*
cpe:2.3:a:mysql:mysql:5.0.17:::::::*
cpe:2.3:a:mysql:mysql:5.0.20:::::::*
cpe:2.3:a:oracle:mysql:4.1.1:::::::*
cpe:2.3:a:oracle:mysql:4.1.4:::::::*
cpe:2.3:a:oracle:mysql:4.1.5:::::::*
cpe:2.3:a:oracle:mysql:4.1.6:::::::*
cpe:2.3:a:oracle:mysql:4.1.7:::::::*
cpe:2.3:a:oracle:mysql:4.1.9:::::::*
cpe:2.3:a:oracle:mysql:4.1.11:::::::*
cpe:2.3:a:oracle:mysql:4.1.16:::::::*
cpe:2.3:a:oracle:mysql:4.1.17:::::::*
cpe:2.3:a:oracle:mysql:4.1.18:::::::*
cpe:2.3:a:oracle:mysql:4.1.19:::::::*
cpe:2.3:a:oracle:mysql:5.0.6:::::::*
cpe:2.3:a:oracle:mysql:5.0.7:::::::*
cpe:2.3:a:oracle:mysql:5.0.8:::::::*
cpe:2.3:a:oracle:mysql:5.0.9:::::::*
cpe:2.3:a:oracle:mysql:5.0.11:::::::*
cpe:2.3:a:oracle:mysql:5.0.12:::::::*
cpe:2.3:a:oracle:mysql:5.0.13:::::::*
cpe:2.3:a:oracle:mysql:5.0.14:::::::*
cpe:2.3:a:oracle:mysql:5.0.18:::::::*
cpe:2.3:a:oracle:mysql:5.0.19:::::::*
cpe:2.3:a:oracle:mysql:5.0.21:::::::*

関連情報、対策とツール

No	URL	refsource	タグ
1	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369735	CONFIRM
2	http://docs.info.apple.com/article.html?artnum=305214	CONFIRM
3	http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html	APPLE
4	http://lists.mysql.com/announce/364	CONFIRM	Patch
5	http://secunia.com/advisories/20365	SECUNIA
6	http://secunia.com/advisories/20489	SECUNIA
7	http://secunia.com/advisories/20531	SECUNIA
8	http://secunia.com/advisories/20541	SECUNIA
9	http://secunia.com/advisories/20562	SECUNIA
10	http://secunia.com/advisories/20625	SECUNIA
11	http://secunia.com/advisories/20712	SECUNIA
12	http://secunia.com/advisories/24479	SECUNIA
13	http://securitytracker.com/id?1016216	SECTRACK
14	http://www.debian.org/security/2006/dsa-1092	DEBIAN
15	http://www.gentoo.org/security/en/glsa/glsa-200606-13.xml	GENTOO
16	http://www.mandriva.com/security/advisories?name=MDKSA-2006:097	MANDRIVA
17	http://www.redhat.com/support/errata/RHSA-2006-0544.html	REDHAT
18	http://www.securityfocus.com/bid/18219	BID
19	http://www.trustix.org/errata/2006/0034/	TRUSTIX
20	http://www.ubuntu.com/usn/usn-288-3	UBUNTU
21	http://www.us-cert.gov/cas/techalerts/TA07-072A.html	CERT	US Government Resource
22	http://www.vupen.com/english/advisories/2006/2105	VUPEN
23	http://www.vupen.com/english/advisories/2007/0930	VUPEN
24	https://exchange.xforce.ibmcloud.com/vulnerabilities/26875	XF
25	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10312	OVAL
26	https://usn.ubuntu.com/303-1/	UBUNTU

共通脆弱性一覧

構成1	以上	以下	より上	未満
cpe:2.3:a:mysql:mysql:4.1.0:::::::*
cpe:2.3:a:mysql:mysql:4.1.2:::::::*
cpe:2.3:a:mysql:mysql:4.1.3:::::::*
cpe:2.3:a:mysql:mysql:4.1.8:::::::*
cpe:2.3:a:mysql:mysql:4.1.10:::::::*
cpe:2.3:a:mysql:mysql:4.1.12:::::::*
cpe:2.3:a:mysql:mysql:4.1.13:::::::*
cpe:2.3:a:mysql:mysql:4.1.14:::::::*
cpe:2.3:a:mysql:mysql:4.1.15:::::::*
cpe:2.3:a:mysql:mysql:5.0.0:::::::*
cpe:2.3:a:mysql:mysql:5.0.1:::::::*
cpe:2.3:a:mysql:mysql:5.0.2:::::::*
cpe:2.3:a:mysql:mysql:5.0.3:::::::*
cpe:2.3:a:mysql:mysql:5.0.4:::::::*
cpe:2.3:a:mysql:mysql:5.0.5:::::::*
cpe:2.3:a:mysql:mysql:5.0.10:::::::*
cpe:2.3:a:mysql:mysql:5.0.15:::::::*
cpe:2.3:a:mysql:mysql:5.0.16:::::::*
cpe:2.3:a:mysql:mysql:5.0.17:::::::*
cpe:2.3:a:mysql:mysql:5.0.20:::::::*
cpe:2.3:a:oracle:mysql:4.1.1:::::::*
cpe:2.3:a:oracle:mysql:4.1.4:::::::*
cpe:2.3:a:oracle:mysql:4.1.5:::::::*
cpe:2.3:a:oracle:mysql:4.1.6:::::::*
cpe:2.3:a:oracle:mysql:4.1.7:::::::*
cpe:2.3:a:oracle:mysql:4.1.9:::::::*
cpe:2.3:a:oracle:mysql:4.1.11:::::::*
cpe:2.3:a:oracle:mysql:4.1.16:::::::*
cpe:2.3:a:oracle:mysql:4.1.17:::::::*
cpe:2.3:a:oracle:mysql:4.1.18:::::::*
cpe:2.3:a:oracle:mysql:4.1.19:::::::*
cpe:2.3:a:oracle:mysql:5.0.6:::::::*
cpe:2.3:a:oracle:mysql:5.0.7:::::::*
cpe:2.3:a:oracle:mysql:5.0.8:::::::*
cpe:2.3:a:oracle:mysql:5.0.9:::::::*
cpe:2.3:a:oracle:mysql:5.0.11:::::::*
cpe:2.3:a:oracle:mysql:5.0.12:::::::*
cpe:2.3:a:oracle:mysql:5.0.13:::::::*
cpe:2.3:a:oracle:mysql:5.0.14:::::::*
cpe:2.3:a:oracle:mysql:5.0.18:::::::*
cpe:2.3:a:oracle:mysql:5.0.19:::::::*
cpe:2.3:a:oracle:mysql:5.0.21:::::::*