First published: Mon Jun 19 2006(Updated: )
mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
MySQL Server | =5.0.0 | |
MySQL Server | =4.1.13 | |
MySQL Server | =5.0.3 | |
MySQL Server | =4.1.15 | |
MySQL Server | =5.0.2 | |
MySQL Server | =5.0.1 | |
MySQL Server | =5.0.4 | |
MySQL Server | =5.1.5 | |
MySQL | =4.0.18 | |
MySQL | =4.1.4 | |
MySQL | =4.1.5 | |
MySQL | =4.1.7 | |
MySQL | =4.1.16 | |
MySQL | =5.0.18 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-3081 has been classified as a denial of service vulnerability that can crash the MySQL server.
To fix CVE-2006-3081, upgrade MySQL to versions 4.1.18, 5.0.19, or 5.1.6 or later.
CVE-2006-3081 affects MySQL versions 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6.
No, CVE-2006-3081 can only be exploited by remote authorized users.
The vulnerability in CVE-2006-3081 exists in the str_to_date function when a NULL second argument is provided.