NetSight
IP …
medium4.0Public exploit code

CVE-2006-3469

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of ser…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.

Affected products

VendorProductAffected versions
MysqlMysql
Versions 4.1.8, 4.1.12, 4.1.13, 4.1.14, 4.1.15, 5.0.5.0.21
OracleMysql
Versions 4.1.6, 4.1.7, 4.1.9, 4.1.11, 4.1.16, 4.1.18

Weakness classification

CWE-134

References