CVE-2006-3081: Medium severity mysql mysql vulnerability
Published Jun 19, 2006
·Updated
mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the strtodate function.
Affected Software
14 affected components
MySQL mysql=5.0.0
MySQL mysql=4.1.13
MySQL mysql=5.0.3
MySQL mysql=4.1.15
MySQL mysql=5.0.2
MySQL mysql=5.0.1
MySQL mysql=5.0.4
MySQL mysql=5.1.5
Oracle MySQL=4.0.18
Oracle MySQL=4.1.4
Oracle MySQL=4.1.5
Oracle MySQL=4.1.7
Oracle MySQL=4.1.16
Oracle MySQL=5.0.18
Event History
Jun 19, 2006
CVE Published
06:02 PM
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3081?
CVE-2006-3081 has been classified as a denial of service vulnerability that can crash the MySQL server.
2
How do I fix CVE-2006-3081?
To fix CVE-2006-3081, upgrade MySQL to versions 4.1.18, 5.0.19, or 5.1.6 or later.
3
Which versions of MySQL are affected by CVE-2006-3081?
CVE-2006-3081 affects MySQL versions 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6.
4
Can CVE-2006-3081 be exploited by unauthorized users?
No, CVE-2006-3081 can only be exploited by remote authorized users.
5
What function in MySQL is vulnerable in CVE-2006-3081?
The vulnerability in CVE-2006-3081 exists in the str_to_date function when a NULL second argument is provided.