Bug 190866

Summary:	CVE-2006-1516 mysql anonymous login information leak
Product:	[Fedora] Fedora	Reporter:	Josh Bressers <bressers>
Component:	mysql	Assignee:	Tom Lane <tgl>
Status:	CLOSED RAWHIDE	QA Contact:	David Lawrence <dkl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	5	CC:	byte, hhorak
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	impact=moderate,source=vendorsec,public=20060502,reported=20060503
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-05-18 01:58:54 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2006-05-05 19:38:45 UTC

+++ This bug was initially created as a clone of Bug #190863 +++

The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x
up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of
memory via a username without a trailing null byte, which causes a buffer over-read.

http://www.wisec.it/vulns.php?page=7

This issue also affects FC4

Comment 1 Tom Lane 2006-05-18 01:58:54 UTC

5.0.21 is pushed into FC5, and 4.1.19 into FC4.