medium5.0
CVE-2004-0956
MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no clos…
Impact
MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Mysql | Versions 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 |
| Suse | Suse Linux | Versions 8.0, 8.1, 8.2, 9.0, 9.1, 9.2 |
| Ubuntu | Ubuntu Linux | Version 4.1 |
References
- NVD record
- CVE.org record
- http://bugs.mysql.com/bug.php?id=3870
- http://lists.mysql.com/packagers/202
- http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml
- http://www.novell.com/linux/security/advisories/2004_01_sr.html
- http://www.trustix.net/errata/2004/0054/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17768
- http://bugs.mysql.com/bug.php?id=3870
- http://lists.mysql.com/packagers/202
- http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml
- http://www.novell.com/linux/security/advisories/2004_01_sr.html
- http://www.trustix.net/errata/2004/0054/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17768