CVE-2006-0903
Published: 27 February 2006
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
mysql-dfsg-5.0 Launchpad, Ubuntu, Debian |
dapper |
Released
(5.0.22-0ubuntu6.06.3)
|
| edgy |
Released
(5.0.24a-9ubuntu0.1)
|
|
| feisty |
Released
(5.0.38-0ubuntu1)
|
|
| upstream |
Needs triage
|