CVE-2008-3963: Medium severity mysql vulnerability
Published Sep 10, 2008
·Updated
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
Affected Software
64 affected components
MySQL mysql=5.0.5
MySQL mysql=5.0.10
MySQL mysql=5.0.54
MySQL mysql=5.0.0
MySQL mysql=5.1.23
MySQL mysql=5.0.15
MySQL mysql=5.0.17
MySQL mysql=5.0.5.0.21
MySQL mysql=5.0.3
MySQL mysql=5.0.44
MySQL mysql=5.0.56
MySQL mysql=5.0.60
MySQL mysql=5.0.24
MySQL mysql=5.0.2
MySQL mysql=5.0.22.1.0.1
MySQL mysql=5.0.30
MySQL mysql=5.0.20
MySQL mysql=5.0.1
MySQL mysql=5.0.4
MySQL mysql=5.0.36
MySQL mysql=5.0.16
MySQL mysql=5.1.5
Oracle MySQL=6.0.0
Oracle MySQL=6.0.1
Oracle MySQL=6.0.2
Oracle MySQL=6.0.3
Oracle MySQL=6.0.4
Oracle MySQL=5.0.50
Oracle MySQL=5.0.51
Oracle MySQL=5.0.0-alpha
Oracle MySQL=5.0.6
Oracle MySQL=5.0.23
Oracle MySQL=5.0.25
Oracle MySQL=5.0.26
Oracle MySQL=5.0.30-sp1
Oracle MySQL=5.0.32
Oracle MySQL=5.0.33
Oracle MySQL=5.0.38
Oracle MySQL=5.0.41
Oracle MySQL=5.0.42
Oracle MySQL=5.0.45
Oracle MySQL=5.0.52
Oracle MySQL=5.1
Oracle MySQL=5.1.1
Oracle MySQL=5.1.2
Oracle MySQL=5.1.3
Oracle MySQL=5.1.4
Oracle MySQL=5.1.6
Oracle MySQL=5.1.7
Oracle MySQL=5.1.8
Oracle MySQL=5.1.9
Oracle MySQL=5.1.10
Oracle MySQL=5.1.11
Oracle MySQL=5.1.12
Oracle MySQL=5.1.13
Oracle MySQL=5.1.14
Oracle MySQL=5.1.15
Oracle MySQL=5.1.16
Oracle MySQL=5.1.17
Oracle MySQL=5.1.18
Oracle MySQL=5.1.19
Oracle MySQL=5.1.20
Oracle MySQL=5.1.21
Oracle MySQL=5.1.22
Remediation
Patch Available
Event History
Sep 10, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3963?
CVE-2008-3963 has a severity rating that can lead to a denial of service due to a daemon crash.
2
How do I fix CVE-2008-3963?
To fix CVE-2008-3963, upgrade MySQL to version 5.0.66 or later, or 5.1.26 or later.
3
Which versions of MySQL are affected by CVE-2008-3963?
CVE-2008-3963 affects MySQL versions prior to 5.0.66, 5.1.26, and 6.0.6.
4
Can CVE-2008-3963 be exploited remotely?
Yes, CVE-2008-3963 can be exploited remotely by sending a specially crafted SQL statement.
5
What type of attack does CVE-2008-3963 enable?
CVE-2008-3963 enables a denial of service attack, resulting in a crash of the MySQL daemon.