{ "CVE_data_meta" : { "ASSIGNER" : "cve@mitre.org", "ID" : "CVE-2005-2558", "STATE" : "PUBLIC" }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "product_name" : "n/a", "version" : { "version_data" : [ { "version_value" : "n/a" } ] } } ] }, "vendor_name" : "n/a" } ] } }, "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", "description" : { "description_data" : [ { "lang" : "eng", "value" : "Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field." } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "eng", "value" : "n/a" } ] } ] }, "references" : { "reference_data" : [ { "name" : "20050808 [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions", "refsource" : "BUGTRAQ", "url" : "http://marc.info/?l=bugtraq&m=112354450412427&w=2" }, { "name" : "20050808 [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions", "refsource" : "FULLDISC", "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html" }, { "name" : "http://www.appsecinc.com/resources/alerts/mysql/2005-002.html", "refsource" : "MISC", "url" : "http://www.appsecinc.com/resources/alerts/mysql/2005-002.html" }, { "name" : "DSA-829", "refsource" : "DEBIAN", "url" : "http://www.debian.org/security/2005/dsa-829" }, { "name" : "DSA-831", "refsource" : "DEBIAN", "url" : "http://www.debian.org/security/2005/dsa-831" }, { "name" : "DSA-833", "refsource" : "DEBIAN", "url" : "http://www.debian.org/security/2005/dsa-833" }, { "name" : "FLSA-2006:167803", "refsource" : "FEDORA", "url" : "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html" }, { "name" : "MDKSA-2005:163", "refsource" : "MANDRIVA", "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:163" }, { "name" : "SCOSA-2006.18", "refsource" : "SCO", "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt" }, { "name" : "236703", "refsource" : "SUNALERT", "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1" }, { "name" : "SUSE-SR:2005:021", "refsource" : "SUSE", "url" : "http://www.novell.com/linux/security/advisories/2005_21_sr.html" }, { "name" : "USN-180-1", "refsource" : "UBUNTU", "url" : "https://www.ubuntu.com/usn/usn-180-1/" }, { "name" : "USN-180-2", "refsource" : "UBUNTU", "url" : "https://www.ubuntu.com/usn/usn-180-2/" }, { "name" : "14509", "refsource" : "BID", "url" : "http://www.securityfocus.com/bid/14509" }, { "name" : "ADV-2008-1326", "refsource" : "VUPEN", "url" : "http://www.vupen.com/english/advisories/2008/1326/references" }, { "name" : "17027", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/17027" }, { "name" : "20381", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/20381" }, { "name" : "29847", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/29847" }, { "name" : "mysql-user-defined-function-bo(21737)", "refsource" : "XF", "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/21737" } ] } }