CVE-2006-3469
Published: 21 July 2006
Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
mysql-dfsg Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
|
| edgy |
Not vulnerable
|
|
| feisty |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
mysql-dfsg-5.0 Launchpad, Ubuntu, Debian |
dapper |
Released
(5.0.22-0ubuntu6.06.3)
|
| edgy |
Released
(5.0.24a-9ubuntu0.1)
|
|
| feisty |
Released
(5.0.38-0ubuntu1)
|
|
| upstream |
Needs triage
|