CVE:CVE-2005-2558
CNNVD:CNNVD-200508-134
Oracle MySQL是美国甲骨文（Oracle）公司的一套开源的关系数据库管理系统。
MySQL 4.0.25之前的4.0版本、4.1.13之前的4.1版本和5.0.7-beta之前的5.0版本中存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
solution:Upgrade mysql mysql to a higher version than 4.1.0,4.1.3,4.1.10,5.0.1,5.0.2,5.0.3,5.0.4,and avoid the version 4.1.0,4.1.3,4.1.10,5.0.1,5.0.2,5.0.3,5.0.4; Upgrade oracle mysql to a higher version than 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.5a,4.0.6,4.0.7,4.0.7:gamma,4.0.8,4.0.8:gamma,4.0.9,4.0.9:gamma,4.0.10,4.0.11,4.0.11:gamma,4.0.12,4.0.13,4.0.14,4.0.15,4.0.18,4.0.20,4.0.21,4.0.24,4.1.0:alpha,4.1.2:alpha,4.1.3:beta,4.1.4,4.1.5,5.0.0:alpha,and avoid the version 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.5a,4.0.6,4.0.7,4.0.7:gamma,4.0.8,4.0.8:gamma,4.0.9,4.0.9:gamma,4.0.10,4.0.11,4.0.11:gamma,4.0.12,4.0.13,4.0.14,4.0.15,4.0.18,4.0.20,4.0.21,4.0.24,4.1.0:alpha,4.1.2:alpha,4.1.3:beta,4.1.4,4.1.5,5.0.0:alpha