CVE-2004-0956: Medium severity Oracle MySQL vulnerability
Published Dec 5, 2004
·Updated
MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.
Affected Software
32 affected components
Oracle MySQL=4.0.0
Oracle MySQL=4.0.1
Oracle MySQL=4.0.2
Oracle MySQL=4.0.3
Oracle MySQL=4.0.4
Oracle MySQL=4.0.5
Oracle MySQL=4.0.5a
Oracle MySQL=4.0.6
Oracle MySQL=4.0.7
Oracle MySQL=4.0.7-gamma
Oracle MySQL=4.0.8-gamma
Oracle MySQL=4.0.8
Oracle MySQL=4.0.9
Oracle MySQL=4.0.9-gamma
Oracle MySQL=4.0.10
Oracle MySQL=4.0.11-gamma
Oracle MySQL=4.0.11
Oracle MySQL=4.0.12
Oracle MySQL=4.0.13
Oracle MySQL=4.0.14
Oracle MySQL=4.0.15
Oracle MySQL=4.0.18
Oracle MySQL=4.0.20
SUSE SuSE Linux=9.2
SUSE SuSE Linux=9.0
Ubuntu Ubuntu Linux=4.1
SUSE SuSE Linux=8.2
SUSE SuSE Linux=9.0
SUSE SuSE Linux=8.0
SUSE SuSE Linux=9.1
Ubuntu Ubuntu Linux=4.1
SUSE SuSE Linux=8.1
Remediation
Patch Available
Event History
Dec 5, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0956?
CVE-2004-0956 is categorized as a denial of service vulnerability that can cause application crashes.
2
How do I fix CVE-2004-0956?
To mitigate CVE-2004-0956, users should upgrade to MySQL version 4.0.21 or later, which addresses this issue.
3
What software versions are affected by CVE-2004-0956?
CVE-2004-0956 affects MySQL versions prior to 4.0.20, including versions 4.0.0 through 4.0.20.
4
Can CVE-2004-0956 be exploited remotely?
Yes, CVE-2004-0956 can be exploited by remote attackers through specifically crafted MATCH AGAINST queries.
5
What types of applications are impacted by CVE-2004-0956?
Applications that utilize vulnerable versions of MySQL for database management may experience denial of service due to CVE-2004-0956.