CVE-2009-2446
13.07.2009, 17:30
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mysql | mysql | 4.1.0 |
| mysql | mysql | 4.1.2 |
| mysql | mysql | 4.1.3 |
| mysql | mysql | 4.1.8 |
| mysql | mysql | 4.1.10 |
| mysql | mysql | 4.1.12 |
| mysql | mysql | 4.1.13 |
| mysql | mysql | 4.1.14 |
| mysql | mysql | 4.1.15 |
| mysql | mysql | 4.1.23 |
| mysql | mysql | 5.0.0 |
| mysql | mysql | 5.0.1 |
| mysql | mysql | 5.0.2 |
| mysql | mysql | 5.0.3 |
| mysql | mysql | 5.0.4 |
| mysql | mysql | 5.0.5 |
| mysql | mysql | 5.0.5.0.21 |
| mysql | mysql | 5.0.10 |
| mysql | mysql | 5.0.15 |
| mysql | mysql | 5.0.16 |
| mysql | mysql | 5.0.17 |
| mysql | mysql | 5.0.20 |
| mysql | mysql | 5.0.22.1.0.1 |
| mysql | mysql | 5.0.24 |
| mysql | mysql | 5.0.30 |
| mysql | mysql | 5.0.36 |
| mysql | mysql | 5.0.44 |
| mysql | mysql | 5.0.54 |
| mysql | mysql | 5.0.56 |
| mysql | mysql | 5.0.60 |
| mysql | mysql | 5.0.66 |
| mysql | mysql | 5.0.82 |
| oracle | mysql | 4.0.0 |
| oracle | mysql | 4.0.1 |
| oracle | mysql | 4.0.2 |
| oracle | mysql | 4.0.3 |
| oracle | mysql | 4.0.4 |
| oracle | mysql | 4.0.5 |
| oracle | mysql | 4.0.5a:a |
| oracle | mysql | 4.0.6 |
| oracle | mysql | 4.0.7 |
| oracle | mysql | 4.0.7:gamma |
| oracle | mysql | 4.0.8 |
| oracle | mysql | 4.0.8:gamma |
| oracle | mysql | 4.0.9 |
| oracle | mysql | 4.0.9:gamma |
| oracle | mysql | 4.0.10 |
| oracle | mysql | 4.0.11 |
| oracle | mysql | 4.0.11:gamma |
| oracle | mysql | 4.0.12 |
| oracle | mysql | 4.0.13 |
| oracle | mysql | 4.0.14 |
| oracle | mysql | 4.0.15 |
| oracle | mysql | 4.0.16 |
| oracle | mysql | 4.0.17 |
| oracle | mysql | 4.0.18 |
| oracle | mysql | 4.0.19 |
| oracle | mysql | 4.0.20 |
| oracle | mysql | 4.0.21 |
| oracle | mysql | 4.0.23 |
| oracle | mysql | 4.0.24 |
| oracle | mysql | 4.0.25 |
| oracle | mysql | 4.0.26 |
| oracle | mysql | 4.0.27 |
| oracle | mysql | 4.1.0:alpha |
| oracle | mysql | 4.1.1 |
| oracle | mysql | 4.1.2:alpha |
| oracle | mysql | 4.1.3:beta |
| oracle | mysql | 4.1.4 |
| oracle | mysql | 4.1.5 |
| oracle | mysql | 4.1.6 |
| oracle | mysql | 4.1.7 |
| oracle | mysql | 4.1.9 |
| oracle | mysql | 4.1.11 |
| oracle | mysql | 4.1.16 |
| oracle | mysql | 4.1.17 |
| oracle | mysql | 4.1.18 |
| oracle | mysql | 4.1.19 |
| oracle | mysql | 4.1.20 |
| oracle | mysql | 4.1.21 |
| oracle | mysql | 4.1.22 |
| oracle | mysql | 5.0.0:alpha |
| oracle | mysql | 5.0.3:beta |
| oracle | mysql | 5.0.6 |
| oracle | mysql | 5.0.7 |
| oracle | mysql | 5.0.8 |
| oracle | mysql | 5.0.9 |
| oracle | mysql | 5.0.11 |
| oracle | mysql | 5.0.12 |
| oracle | mysql | 5.0.13 |
| oracle | mysql | 5.0.14 |
| oracle | mysql | 5.0.18 |
| oracle | mysql | 5.0.19 |
| oracle | mysql | 5.0.21 |
| oracle | mysql | 5.0.22 |
| oracle | mysql | 5.0.23 |
| oracle | mysql | 5.0.25 |
| oracle | mysql | 5.0.26 |
| oracle | mysql | 5.0.27 |
| oracle | mysql | 5.0.30:sp1 |
| oracle | mysql | 5.0.32 |
| oracle | mysql | 5.0.33 |
| oracle | mysql | 5.0.37 |
| oracle | mysql | 5.0.38 |
| oracle | mysql | 5.0.41 |
| oracle | mysql | 5.0.42 |
| oracle | mysql | 5.0.45 |
| oracle | mysql | 5.0.50 |
| oracle | mysql | 5.0.51 |
| oracle | mysql | 5.0.51a:a |
| oracle | mysql | 5.0.52 |
| oracle | mysql | 5.0.75 |
| oracle | mysql | 5.0.77 |
| oracle | mysql | 5.0.81 |
| oracle | mysql | 5.0.83 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mysql-5.1 |
| ||||||||||||||||
| mysql-dfsg-5.0 |
| ||||||||||||||||
| mysql-dfsg-5.1 |
|
Common Weakness Enumeration
References