Description
Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 3
- DSA-833-2 mysql-dfsg-4.1 - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-831-1 mysql-dfsg-4.1 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-829-1 mysql - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-831 vendor-advisory
- mysql-user-defined-function-bo(21737) vdb-entry
- MDKSA-2005:163 vendor-advisory
- 20050808 [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions mailing-list
- USN-180-2 vendor-advisory
- USN-180-1 vendor-advisory
- SUSE-SR:2005:021 vendor-advisory
- DSA-833 vendor-advisory
- DSA-829 vendor-advisory
- 20381 third-party-advisory
- 14509 vdb-entry
- 236703 vendor-advisory
- FLSA-2006:167803 vendor-advisory
- http://www.appsecinc.com/resources/alerts/mysql/2005-002.html
- 20050808 [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions mailing-list
- ADV-2008-1326 vdb-entry
- 17027 third-party-advisory
- 29847 third-party-advisory