CVEvulnerability

CVE-2009-5026

6.8 MEDIUM Published 2012-08-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-89

Description

The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.

Affected configurations

• mysql mysql 5.0.0 • mysql mysql 5.0.1 • mysql mysql 5.0.2 • mysql mysql 5.0.3 • mysql mysql 5.0.4 • mysql mysql 5.0.5 • mysql mysql 5.0.10 • mysql mysql 5.0.15 • mysql mysql 5.0.16 • mysql mysql 5.0.17 • mysql mysql 5.0.20 • mysql mysql 5.0.24 • mysql mysql 5.0.45 • mysql mysql 5.0.82 • mysql mysql 5.0.84 • mysql mysql 5.0.87 • oracle mysql 5.0.23 • oracle mysql 5.0.41 • oracle mysql 5.0.45 • oracle mysql 5.0.51 • oracle mysql 5.0.67 • oracle mysql 5.0.75 • oracle mysql 5.0.77 • oracle mysql 5.0.81 • oracle mysql 5.0.83 • oracle mysql 5.0.85 • oracle mysql 5.0.86 • oracle mysql 5.0.88 • oracle mysql 5.0.89 • oracle mysql 5.0.90 • oracle mysql 5.0.91 • oracle mysql 5.0.92 • mysql mysql 5.1.23 • mysql mysql 5.1.31 • mysql mysql 5.1.32 • mysql mysql 5.1.34 • mysql mysql 5.1.37 • oracle mysql 5.1 • oracle mysql 5.1.1 • oracle mysql 5.1.2 • oracle mysql 5.1.3 • oracle mysql 5.1.4 • oracle mysql 5.1.10 • oracle mysql 5.1.11 • oracle mysql 5.1.12 • oracle mysql 5.1.13 • oracle mysql 5.1.14 • oracle mysql 5.1.15 • oracle mysql 5.1.16 • oracle mysql 5.1.17 • oracle mysql 5.1.18 • oracle mysql 5.1.19 • oracle mysql 5.1.20 • oracle mysql 5.1.21 • oracle mysql 5.1.22 • oracle mysql 5.1.23 • oracle mysql 5.1.24 • oracle mysql 5.1.25 • oracle mysql 5.1.26 • oracle mysql 5.1.27 … and 21 more

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References