CVE-2005-2558 Memory corruption in n/a
Authenticated users with UDF creation privileges can execute arbitrary code via a stack-based buffer overflow in MySQL.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-2558?
CVE-2005-2558 is a medium-severity memory corruption vulnerability in Mysql Mysql, published on 16 Aug 2005. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.
Which versions are affected by CVE-2005-2558?
It affects 2 products.
Products include Mysql Mysql, Oracle Mysql.
How do I fix CVE-2005-2558?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2005-2558 being exploited?
There is no known exploitation of CVE-2005-2558 in the wild and no public exploit code.
Other vulnerabilities in Mysql Mysql
Sources
Also known as DSA-829-1, DSA-831-1, DSA-833-2, GHSA-qxmx-9x27-fp8j.