CVE-2004-0836

Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).

• CWE-119

• http://bugs.mysql.com/bug.php?id=4017Exploit, Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892Broken Link
• http://lists.mysql.com/internals/14726Vendor Advisory
• http://marc.info/?l=bugtraq&m=110140517515735&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/12305/Third Party Advisory
• http://www.ciac.org/ciac/bulletins/p-018.shtmlBroken Link
• http://www.debian.org/security/2004/dsa-562Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200410-22.xmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2004-597.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2004-611.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/10981Third Party Advisory, VDB Entry
• http://www.trustix.org/errata/2004/0054/Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17047Third Party Advisory, VDB Entry
• http://bugs.mysql.com/bug.php?id=4017Exploit, Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892Broken Link
• http://lists.mysql.com/internals/14726Vendor Advisory
• http://marc.info/?l=bugtraq&m=110140517515735&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/12305/Third Party Advisory
• http://www.ciac.org/ciac/bulletins/p-018.shtmlBroken Link
• http://www.debian.org/security/2004/dsa-562Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200410-22.xmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2004-597.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2004-611.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/10981Third Party Advisory, VDB Entry
• http://www.trustix.org/errata/2004/0054/Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17047Third Party Advisory, VDB Entry

Published

Nov 3, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0830The Content Scanner Server in F-Secure Anti-Virus for Micros…
• CVE-2004-0831McAfee VirusScan 4.5.1 does not drop SYSTEM privileges befor…
• CVE-2004-0832The (1) ntlm_fetch_string and (2) ntlm_get_string functions …
• CVE-2004-0833Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl …
• CVE-2004-0834Format string vulnerability in Speedtouch USB driver before …
• CVE-2004-0835MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.…
• CVE-2004-0837MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows atta…
• CVE-2004-0838Lexar Safe Guard for JumpDrive Secure 1.0 stores the passwor…
• CVE-2004-0839Internet Explorer in Windows XP SP2, and other versions incl…
• CVE-2004-0840The SMTP (Simple Mail Transfer Protocol) component of Micros…
• CVE-2004-0841Internet Explorer 6.x allows remote attackers to install arb…
• CVE-2004-0842Internet Explorer 6.0 SP1 and earlier, and possibly other ve…