CVEvulnerability

CVE-2006-0903

4.6 MEDIUM Published 2006-02-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-02-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.

Affected configurations

• mysql mysql 4.1.0 • mysql mysql 4.1.3 • mysql mysql 4.1.8 • mysql mysql 4.1.10 • mysql mysql 4.1.12 • mysql mysql 4.1.13 • mysql mysql 4.1.14 • mysql mysql 4.1.15 • mysql mysql 5.0.1 • mysql mysql 5.0.2 • mysql mysql 5.0.4 • mysql mysql 5.0.5 • mysql mysql 5.0.10 • mysql mysql 5.0.15 • mysql mysql 5.0.16 • mysql mysql 5.0.17 • oracle mysql 3.23 • oracle mysql 3.23.0 • oracle mysql 3.23.1 • oracle mysql 3.23.2 • oracle mysql 3.23.3 • oracle mysql 3.23.4 • oracle mysql 3.23.5 • oracle mysql 3.23.6 • oracle mysql 3.23.7 • oracle mysql 3.23.8 • oracle mysql 3.23.9 • oracle mysql 3.23.10 • oracle mysql 3.23.11 • oracle mysql 3.23.12 • oracle mysql 3.23.13 • oracle mysql 3.23.14 • oracle mysql 3.23.15 • oracle mysql 3.23.16 • oracle mysql 3.23.17 • oracle mysql 3.23.18 • oracle mysql 3.23.19 • oracle mysql 3.23.20 • oracle mysql 3.23.21 • oracle mysql 3.23.22 • oracle mysql 3.23.23 • oracle mysql 3.23.24 • oracle mysql 3.23.25 • oracle mysql 3.23.26 • oracle mysql 3.23.27 • oracle mysql 3.23.28 • oracle mysql 3.23.29 • oracle mysql 3.23.30 • oracle mysql 3.23.31 • oracle mysql 3.23.32 • oracle mysql 3.23.33 • oracle mysql 3.23.34 • oracle mysql 3.23.35 • oracle mysql 3.23.36 • oracle mysql 3.23.37 • oracle mysql 3.23.38 • oracle mysql 3.23.39 • oracle mysql 3.23.40 • oracle mysql 3.23.41 • oracle mysql 3.23.42 … and 69 more

References