MySQL did not correctly handle NULL as the second argument to the
str_to_date() function. An authenticated user could exploit this to
crash the server.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 5.10 | noarch | mysql-server-4.1 | < 4.1.12-1ubuntu3.6 | UNKNOWN |