Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-07-21 07:03
Updated : 2019-12-17 12:16
NVD link : CVE-2006-3469
Mitre link : CVE-2006-3469
JSON object : View
CWE
CWE-134
Use of Externally-Controlled Format String
Products Affected
oracle
- mysql
mysql
- mysql