CVE-2006-1516

Name of the Vulnerable Software and Affected Versions: MySQL versions 4.0.x up to 4.0.26 MySQL versions 4.1.x up to 4.1.18 MySQL versions 5.0.x up to 5.0.20

Description: The issue allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read. This occurs due to the check connection function in sql parse.cc.

Recommendations: For MySQL versions 4.0.x up to 4.0.26, update to a version later than 4.0.26 to resolve the issue. For MySQL versions 4.1.x up to 4.1.18, update to a version later than 4.1.18 to resolve the issue. For MySQL versions 5.0.x up to 5.0.20, update to a version later than 5.0.20 to resolve the issue.