CVE-2006-1518

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939Patch
• http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.htmlPatch
• http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html
• http://secunia.com/advisories/19929Patch, Vendor Advisory
• http://secunia.com/advisories/20241
• http://secunia.com/advisories/20253
• http://secunia.com/advisories/20333
• http://secunia.com/advisories/20457
• http://secunia.com/advisories/20762
• http://securityreason.com/securityalert/839
• http://securitytracker.com/id?1016016Patch
• http://www.debian.org/security/2006/dsa-1071
• http://www.debian.org/security/2006/dsa-1073
• http://www.debian.org/security/2006/dsa-1079
• http://www.kb.cert.org/vuls/id/602457Patch, Third Party Advisory, US Government Resource
• http://www.novell.com/linux/security/advisories/2006-06-02.html
• http://www.securityfocus.com/archive/1/432734/100/0/threaded
• http://www.securityfocus.com/bid/17780
• http://www.vupen.com/english/advisories/2006/1633
• http://www.wisec.it/vulns.php?page=8Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26232
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939Patch
• http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.htmlPatch
• http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html
• http://secunia.com/advisories/19929Patch, Vendor Advisory
• http://secunia.com/advisories/20241
• http://secunia.com/advisories/20253
• http://secunia.com/advisories/20333
• http://secunia.com/advisories/20457
• http://secunia.com/advisories/20762
• http://securityreason.com/securityalert/839
• http://securitytracker.com/id?1016016Patch
• http://www.debian.org/security/2006/dsa-1071
• http://www.debian.org/security/2006/dsa-1073
• http://www.debian.org/security/2006/dsa-1079
• http://www.kb.cert.org/vuls/id/602457Patch, Third Party Advisory, US Government Resource
• http://www.novell.com/linux/security/advisories/2006-06-02.html
• http://www.securityfocus.com/archive/1/432734/100/0/threaded
• http://www.securityfocus.com/bid/17780
• http://www.vupen.com/english/advisories/2006/1633
• http://www.wisec.it/vulns.php?page=8Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26232

Published

May 5, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1512Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-1513Multiple buffer overflows in abc2ps before 1.3.3 allow user-…
• CVE-2006-1514Multiple buffer overflows in the abcmidi-yaps translator in …
• CVE-2006-1515Buffer overflow in the addnewword function in typespeed 0.4.…
• CVE-2006-1516The check_connection function in sql_parse.cc in MySQL 4.0.x…
• CVE-2006-1517sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18…
• CVE-2006-1519Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-1520Format string vulnerability in ANSI C Sender Policy Framewor…
• CVE-2006-1521Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-1522The sys_add_key function in the keyring code in Linux kernel…
• CVE-2006-1523The __group_complete_signal function in the RCU signal handl…
• CVE-2006-1524madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does no…