CVE-2006-1517: MySQL

Medium severity, CVSS 5.0. EPSS: 5% chance of exploitation in the next 30 days.

sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.

Affected products

• MySQL MySQL: version 4.1.0 only; version 4.1.3 only; version 4.1.8 only; version 4.1.10 only; version 4.1.12 only; version 4.1.13 only; …
• Oracle MySQL: version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2006-05-05. Last modified 2026-06-16.