Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle mysql 4.0.25 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-2573
The mysql_create_function function in sql_udf.cc for MySQL 4.0 prior to 4.0.25, 4.1 prior to 4.1.13, and 5.0 prior to 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows malicious users to include arbitrary files via the ...
Mysql Mysql 5.0.3Mysql Mysql 4.1.10Mysql Mysql 5.0.2Mysql Mysql 5.0.1Mysql Mysql 4.1.0Mysql Mysql 5.0.4Mysql Mysql 4.1.3Oracle Mysql 4.0.0Oracle Mysql 4.0.1Oracle Mysql 4.0.2Oracle Mysql 4.0.3Oracle Mysql 4.0.4Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.6Oracle Mysql 4.0.7Oracle Mysql 4.0.8Oracle Mysql 4.0.9Oracle Mysql 4.0.10Oracle Mysql 4.0.11Oracle Mysql 4.0.12Oracle Mysql 4.0.13
NA
CVE-2006-1516
The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote malicious users to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.
Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.16Oracle Mysql 4.0.17Oracle Mysql 4.0.24Oracle Mysql 4.0.25Oracle Mysql 4.0.7Oracle Mysql 4.0.8Mysql Mysql 4.1.10Oracle Mysql 4.1.17Oracle Mysql 4.1.18Oracle Mysql 4.1.2Mysql Mysql 4.1.8Oracle Mysql 4.1.9Oracle Mysql 5.0.12Oracle Mysql 5.0.13Mysql Mysql 5.0.3Oracle Mysql 5.0.3Mysql Mysql 5.0.4Oracle Mysql 4.0.0Oracle Mysql 4.0.14Oracle Mysql 4.0.15
NA
CVE-2006-1517
sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote malicious users to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.
Oracle Mysql 4.0.0Oracle Mysql 4.0.1Oracle Mysql 4.0.15Oracle Mysql 4.0.16Oracle Mysql 4.0.24Oracle Mysql 4.0.25Oracle Mysql 4.0.7Oracle Mysql 4.1.0Mysql Mysql 4.1.10Oracle Mysql 4.1.17Oracle Mysql 4.1.18Oracle Mysql 4.1.7Mysql Mysql 4.1.8Oracle Mysql 5.0.11Oracle Mysql 5.0.12Mysql Mysql 5.0.3Oracle Mysql 5.0.3Oracle Mysql 4.0.13Oracle Mysql 4.0.14Oracle Mysql 4.0.20Oracle Mysql 4.0.21Oracle Mysql 4.0.10
NA
CVE-2006-4226
MySQL prior to 4.1.21, 5.0 prior to 5.0.25, and 5.1 prior to 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.
Oracle Mysql 4.0.0Oracle Mysql 4.0.14Oracle Mysql 4.0.15Oracle Mysql 4.0.21Oracle Mysql 4.0.23Oracle Mysql 4.0.5aOracle Mysql 4.0.6Mysql Mysql 4.1.0Mysql Mysql 4.1.12Oracle Mysql 4.1.17Oracle Mysql 4.1.18Oracle Mysql 4.1.3Oracle Mysql 4.1.4Mysql Mysql 5.0.0Oracle Mysql 5.0.13Oracle Mysql 5.0.14Oracle Mysql 5.0.18Oracle Mysql 5.0.19Mysql Mysql 5.0.22.1.0.1Mysql Mysql 5.0.3Oracle Mysql 5.0.3Oracle Mysql 5.0.7
NA
CVE-2009-2446
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 up to and including 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format...
Mysql Mysql 4.1.8Oracle Mysql 4.1.9Oracle Mysql 4.1.17Oracle Mysql 4.1.16Mysql Mysql 4.1.3Oracle Mysql 4.1.22Mysql Mysql 4.1.0Oracle Mysql 4.1.0Mysql Mysql 4.1.12Mysql Mysql 4.1.13Oracle Mysql 4.0.25Oracle Mysql 4.0.24Oracle Mysql 4.0.6Oracle Mysql 4.0.1Oracle Mysql 4.0.16Oracle Mysql 4.0.17Oracle Mysql 5.0.0Oracle Mysql 5.0.11Mysql Mysql 5.0.1Oracle Mysql 5.0.42Mysql Mysql 5.0.56Oracle Mysql 5.0.32
NA
CVE-2006-0903
MySQL 5.0.18 and previous versions allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vend...
Mysql Mysql 5.0.5Mysql Mysql 5.0.10Mysql Mysql 5.0.15Mysql Mysql 5.0.17Mysql Mysql 4.1.13Mysql Mysql 4.1.15Mysql Mysql 4.1.8Mysql Mysql 4.1.14Mysql Mysql 4.1.12Mysql Mysql 4.1.10Mysql Mysql 5.0.2Mysql Mysql 5.0.1Mysql Mysql 4.1.0Mysql Mysql 5.0.4Mysql Mysql 4.1.3Mysql Mysql 5.0.16Oracle Mysql 3.23Oracle Mysql 3.23.0Oracle Mysql 3.23.1Oracle Mysql 3.23.2Oracle Mysql 3.23.3Oracle Mysql 3.23.4
NA
CVE-2006-4031
MySQL 4.1 prior to 4.1.21 and 5.0 prior to 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.14Oracle Mysql 3.23.15Oracle Mysql 3.23.21Oracle Mysql 3.23.22Oracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.36Oracle Mysql 3.23.37Oracle Mysql 3.23.43Oracle Mysql 3.23.44Oracle Mysql 3.23.51Oracle Mysql 3.23.52Oracle Mysql 3.23.57Oracle Mysql 3.23.58Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.17Oracle Mysql 4.0.18Oracle Mysql 4.0.25
NA
CVE-2005-2558
Stack-based buffer overflow in the init_syms function in MySQL 4.0 prior to 4.0.25, 4.1 prior to 4.1.13, and 5.0 prior to 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.
Oracle Mysql 4.0.0Oracle Mysql 4.0.14Oracle Mysql 4.0.15Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.9Mysql Mysql 4.1.0Oracle Mysql 4.1.5Oracle Mysql 4.0.11Oracle Mysql 4.0.20Oracle Mysql 4.0.21Oracle Mysql 4.0.24Oracle Mysql 4.0.7Oracle Mysql 4.0.8Oracle Mysql 4.1.2Mysql Mysql 4.1.3Mysql Mysql 5.0.3Mysql Mysql 5.0.4Oracle Mysql 4.0.12Oracle Mysql 4.0.13Oracle Mysql 4.0.3Oracle Mysql 4.0.4
NA
CVE-2012-1696
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and previous versions allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
Oracle MysqlOracle Mysql 5.5.5Oracle Mysql 5.5.20Oracle Mysql 5.5.6Oracle Mysql 5.5.2Oracle Mysql 5.5.15Oracle Mysql 5.5.10Oracle Mysql 5.5.9Oracle Mysql 5.1.46Oracle Mysql 5.1.47Mysql Mysql 5.1.23Oracle Mysql 5.1.54Oracle Mysql 5.1.55Oracle Mysql 5.1.6Oracle Mysql 5.1.3Oracle Mysql 5.1.12Oracle Mysql 5.1.17Oracle Mysql 5.1Mysql Mysql 5.1.32Oracle Mysql 5.1.19Oracle Mysql 5.1.20Mysql Mysql Community Server 5.1.19
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook