Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the mysql_real_connect function in the MySql client library (libmysqlclient) 4.0.13 and earlier allows local users to execute arbitrary code via a long socket name, a different vulnerability than CVE-2001-1453.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle MySQL 缓冲区错误漏洞
Vulnerability Description
Oracle MySQL是美国甲骨文（Oracle）公司的一套开源的关系数据库管理系统。 MySQL包含的mysql_real_connect()函数不充分检查用户提供的参数值，本地或远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能用来破坏数据库或执行任意指令。攻击者可以利用SQL注入攻击，或者可上传恶意脚本到服务器上，通过传递超长的字符串作为mysql_real_connect()函数参数，可触发溢出，精心构建提交数据可能以数据库进程权限在系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A