CVE-2006-3469medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694
http://bugs.mysql.com/bug.php?id=20729
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html
http://docs.info.apple.com/article.html?artnum=305214
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
http://secunia.com/advisories/21147
http://secunia.com/advisories/21366
http://secunia.com/advisories/24479
http://secunia.com/advisories/31226
http://security.gentoo.org/glsa/glsa-200608-09.xml
http://www.debian.org/security/2006/dsa-1112
http://www.redhat.com/support/errata/RHSA-2008-0768.html
http://www.securityfocus.com/bid/19032
http://www.ubuntu.com/usn/usn-321-1
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
http://www.vupen.com/english/advisories/2007/0930
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:4.1.20:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 60451 | Scientific Linux Security Update : mysql on SL4.x i386/x86_64 | Nessus | Scientific Linux Local Security Checks | medium |
| 17800 | MySQL < 4.1.21 / 5.0 Denial of Service | Nessus | Databases | medium |
| 33585 | RHEL 4 : mysql (RHSA-2008:0768) | Nessus | Red Hat Local Security Checks | medium |
| 27899 | Ubuntu 5.10 : mysql-dfsg-4.1 vulnerability (USN-321-1) | Nessus | Ubuntu Local Security Checks | medium |
| 3947 | Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003) | Nessus Network Monitor | Web Clients | high |
| 24811 | Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003) | Nessus | MacOS X Local Security Checks | critical |
| 24656 | Slackware 10.2 : mysql (SSA:2006-211-01) | Nessus | Slackware Local Security Checks | medium |
| 22654 | Debian DSA-1112-1 : mysql-dfsg-4.1 - several vulnerabilities | Nessus | Debian Local Security Checks | medium |
| 22213 | FreeBSD : mysql -- format string vulnerability (fcb90eb0-2ace-11db-a6e2-000e0c2e438a) | Nessus | FreeBSD Local Security Checks | medium |
| 22167 | GLSA-200608-09 : MySQL: Denial of Service | Nessus | Gentoo Local Security Checks | medium |
| 3527 | Oracle MySQL Remote Overflow and Information Disclosure Vulnerabilities | Nessus Network Monitor | Database | medium |
| 801163 | MySQL Remote Overflow and Information Disclosure Vulnerabilities | Log Correlation Engine | Database | medium |