Lucene search

[email protected]NVD:CVE-2009-2446

HistoryJul 13, 2009 - 5:30 p.m.

CVE-2009-2446

2009-07-1317:30:00

CWE-134

[email protected]

web.nvd.nist.gov

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.155 Low

EPSS

Percentile

96.0%

JSON

Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

mysqlmysqlMatch4.1.0

mysqlmysqlMatch4.1.2

mysqlmysqlMatch4.1.3

mysqlmysqlMatch4.1.8

mysqlmysqlMatch4.1.10

mysqlmysqlMatch4.1.12

mysqlmysqlMatch4.1.13

mysqlmysqlMatch4.1.14

mysqlmysqlMatch4.1.15

mysqlmysqlMatch4.1.23

mysqlmysqlMatch5.0.0

mysqlmysqlMatch5.0.1

mysqlmysqlMatch5.0.2

mysqlmysqlMatch5.0.3

mysqlmysqlMatch5.0.4

mysqlmysqlMatch5.0.5

mysqlmysqlMatch5.0.5.0.21

mysqlmysqlMatch5.0.10

mysqlmysqlMatch5.0.15

mysqlmysqlMatch5.0.16

mysqlmysqlMatch5.0.17

mysqlmysqlMatch5.0.20

mysqlmysqlMatch5.0.22.1.0.1

mysqlmysqlMatch5.0.24

mysqlmysqlMatch5.0.30

mysqlmysqlMatch5.0.36

mysqlmysqlMatch5.0.44

mysqlmysqlMatch5.0.54

mysqlmysqlMatch5.0.56

mysqlmysqlMatch5.0.60

mysqlmysqlMatch5.0.66

mysqlmysqlMatch5.0.82

oraclemysqlMatch4.0.0

oraclemysqlMatch4.0.1

oraclemysqlMatch4.0.2

oraclemysqlMatch4.0.3

oraclemysqlMatch4.0.4

oraclemysqlMatch4.0.5

oraclemysqlMatch4.0.5a

oraclemysqlMatch4.0.6

oraclemysqlMatch4.0.7

oraclemysqlMatch4.0.7gamma

oraclemysqlMatch4.0.8

oraclemysqlMatch4.0.8gamma

oraclemysqlMatch4.0.9

oraclemysqlMatch4.0.9gamma

oraclemysqlMatch4.0.10

oraclemysqlMatch4.0.11

oraclemysqlMatch4.0.11gamma

oraclemysqlMatch4.0.12

oraclemysqlMatch4.0.13

oraclemysqlMatch4.0.14

oraclemysqlMatch4.0.15

oraclemysqlMatch4.0.16

oraclemysqlMatch4.0.17

oraclemysqlMatch4.0.18

oraclemysqlMatch4.0.19

oraclemysqlMatch4.0.20

oraclemysqlMatch4.0.21

oraclemysqlMatch4.0.23

oraclemysqlMatch4.0.24

oraclemysqlMatch4.0.25

oraclemysqlMatch4.0.26

oraclemysqlMatch4.0.27

oraclemysqlMatch4.1.0alpha

oraclemysqlMatch4.1.1

oraclemysqlMatch4.1.2alpha

oraclemysqlMatch4.1.3beta

oraclemysqlMatch4.1.4

oraclemysqlMatch4.1.5

oraclemysqlMatch4.1.6

oraclemysqlMatch4.1.7

oraclemysqlMatch4.1.9

oraclemysqlMatch4.1.11

oraclemysqlMatch4.1.16

oraclemysqlMatch4.1.17

oraclemysqlMatch4.1.18

oraclemysqlMatch4.1.19

oraclemysqlMatch4.1.20

oraclemysqlMatch4.1.21

oraclemysqlMatch4.1.22

oraclemysqlMatch5.0.0alpha

oraclemysqlMatch5.0.3beta

oraclemysqlMatch5.0.6

oraclemysqlMatch5.0.7

oraclemysqlMatch5.0.8

oraclemysqlMatch5.0.9

oraclemysqlMatch5.0.11

oraclemysqlMatch5.0.12

oraclemysqlMatch5.0.13

oraclemysqlMatch5.0.14

oraclemysqlMatch5.0.18

oraclemysqlMatch5.0.19

oraclemysqlMatch5.0.21

oraclemysqlMatch5.0.22

oraclemysqlMatch5.0.23

oraclemysqlMatch5.0.25

oraclemysqlMatch5.0.26

oraclemysqlMatch5.0.27

oraclemysqlMatch5.0.30sp1

oraclemysqlMatch5.0.32

oraclemysqlMatch5.0.33

oraclemysqlMatch5.0.37

oraclemysqlMatch5.0.38

oraclemysqlMatch5.0.41

oraclemysqlMatch5.0.42

oraclemysqlMatch5.0.45

oraclemysqlMatch5.0.50

oraclemysqlMatch5.0.51

oraclemysqlMatch5.0.51a

oraclemysqlMatch5.0.52

oraclemysqlMatch5.0.75

oraclemysqlMatch5.0.77

oraclemysqlMatch5.0.81

oraclemysqlMatch5.0.83

References

archives.neohapsis.com/archives/fulldisclosure/2009-07/0058.html

lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

secunia.com/advisories/35767

secunia.com/advisories/36566

secunia.com/advisories/38517

securitytracker.com/id?1022533

support.apple.com/kb/HT4077

ubuntu.com/usn/usn-897-1

www.mandriva.com/security/advisories?name=MDVSA-2009:179

www.osvdb.org/55734

www.redhat.com/support/errata/RHSA-2009-1289.html

www.redhat.com/support/errata/RHSA-2010-0110.html

www.securityfocus.com/archive/1/504799/100/0/threaded

www.securityfocus.com/bid/35609

www.ubuntu.com/usn/USN-1397-1

www.vupen.com/english/advisories/2009/1857

exchange.xforce.ibmcloud.com/vulnerabilities/51614

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11857

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.155 Low

EPSS

Percentile

96.0%

JSON

Related for NVD:CVE-2009-2446

nessus22 prion1 altlinux1 openvas40 ubuntucve1 cvelist1 veracode1 securityvulns1 checkpoint_advisories1 cve1 debian1 fedora1 redhat3 centos2 oraclelinux2 seebug1 ubuntu2 gentoo1 threatpost1