CVEvulnerability

CVE-2006-3469

4.0 MEDIUM Published 2006-07-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-07-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-134

Description

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.

Affected configurations

• mysql mysql 4.1.8 • mysql mysql 4.1.12 • mysql mysql 4.1.13 • mysql mysql 4.1.14 • mysql mysql 4.1.15 • mysql mysql 5.0.5.0.21 • mysql mysql 5.0.10 • mysql mysql 5.0.15 • mysql mysql 5.0.16 • mysql mysql 5.0.17 • oracle mysql 4.1.6 • oracle mysql 4.1.7 • oracle mysql 4.1.9 • oracle mysql 4.1.11 • oracle mysql 4.1.16 • oracle mysql 4.1.18 • oracle mysql 4.1.19 • oracle mysql 4.1.20 • oracle mysql 5.0.6 • oracle mysql 5.0.9 • oracle mysql 5.0.11 • oracle mysql 5.0.12 • oracle mysql 5.0.13 • oracle mysql 5.0.18 • oracle mysql 5.0.19

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References