Your submission was sent successfully! Close

CVE-2008-3963

Published: 11 September 2008

MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.

Priority

Medium

Status

Package Release Status
mysql-dfsg-5.0
Launchpad, Ubuntu, Debian
dapper
Released (5.0.22-0ubuntu6.06.11)
feisty Needed
(reached end-of-life)
gutsy
Released (5.0.45-1ubuntu3.4)
hardy
Released (5.0.51a-3ubuntu5.4)
intrepid Not vulnerable
(5.0.67-0ubuntu6)
upstream
Released (5.0.66)