CVE-2006-1516: MySQL

Medium severity, CVSS 5.0. EPSS: 35.8% chance of exploitation in the next 30 days.

The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.

Affected products

• MySQL MySQL: version 4.1.0 only; version 4.1.3 only; version 4.1.8 only; version 4.1.10 only; version 4.1.12 only; version 4.1.13 only; …
• Oracle MySQL: version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2006-05-05. Last modified 2026-06-16.