Skip to content
OpenAdvisories
Unscored CVE-2010-3064 EUVD-2010-3066GHSA-9cvq-xmrc-xp67

Stack-based buffer overflow in the php_mysqlnd_auth_write function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-depende…

Published Aug 20, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in the php_mysqlnd_auth_write function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) username or (2) database name argument to the (a) mysql_connect or (b) mysqli_connect function.

References