Read the docs
TI-2006-03378 Aliases CVE-2006-3486GHSA-x23g-72hv-58qm

Off-by-one buffer overflow in the Instance_options::complete_initialization function in…

Priority LOW 12CWE-189Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-189 and the CVSS impact.

Summary

Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors, which triggers the overflow when the convert_dirname function is called. NOTE: the vendor has disputed this issue via e-mail to CVE, saying that it is only exploitable when the user has access to the configuration file or the Instance Manager daemon. Due to intended functionality, this level of access would already allow the user to disrupt program operation, so this does not cross security boundaries and is not a vulnerability

Why it matters now

EPSS 0.00652 51st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 34

CPEVersionsRoleVendor
cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*5.0.0VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*5.0.1VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*5.0.2VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*5.0.3VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*5.0.4VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*5.0.5VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*5.0.10VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*5.0.15VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*5.0.16VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*5.0.17VulnerableMysql
  • cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:* Versions 5.0.0 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:* Versions 5.0.2 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:* Versions 5.0.3 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:* Versions 5.0.4 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:* Versions 5.0.5 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:* Versions 5.0.10 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:* Versions 5.0.15 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:* Versions 5.0.16 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:* Versions 5.0.17 Vulnerable ·Mysql
Show 24 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*5.0.20VulnerableMysql
cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*5.1.5VulnerableMysql
cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*5.0.6VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*5.0.7VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*5.0.8VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*5.0.9VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*5.0.11VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*5.0.12VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*5.0.13VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*5.0.14VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*5.0.18VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*5.0.19VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*5.0.21VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*5.0.22VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*5.1.1VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*5.1.2VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*5.1.3VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*5.1.4VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*5.1.6VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*5.1.7VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*5.1.8VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*5.1.9VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*5.1.10VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*5.1.11VulnerableOracle
  • cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:* Versions 5.0.20 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:* Versions 5.1.5 Vulnerable ·Mysql
  • cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:* Versions 5.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:* Versions 5.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:* Versions 5.0.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:* Versions 5.0.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:* Versions 5.0.11 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:* Versions 5.0.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:* Versions 5.0.13 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:* Versions 5.0.14 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:* Versions 5.0.18 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:* Versions 5.0.19 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:* Versions 5.0.21 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:* Versions 5.0.22 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:* Versions 5.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:* Versions 5.1.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:* Versions 5.1.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:* Versions 5.1.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:* Versions 5.1.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:* Versions 5.1.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:* Versions 5.1.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:* Versions 5.1.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:* Versions 5.1.10 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:* Versions 5.1.11 Vulnerable ·Oracle

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-3486
  2. 2026-10-03 Alias added: GHSA-x23g-72hv-58qm
  3. 2026-10-14 EPSS moved to the 50th–90th percentile

References

Advisory 1

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences