CVE-2009-2446
NoneCVSS
—
EPSS
10.6%
Published
Jul 13, 2009
CISA due date
—
The record
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:4.0 | mysql-dfsg-5.0 | 0 | 5.0.32-7etch11 |
| Debian:5.0 | mysql-dfsg-5.0 | 0 | 5.0.51a-24+lenny2 |
| Red Hat:enterprise_linux:4::as | mysql | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::as | mysql-bench | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::as | mysql-debuginfo | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::as | mysql-devel | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::as | mysql-server | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | mysql | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | mysql-bench | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | mysql-debuginfo | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | mysql-devel | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | mysql-server | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::es | mysql | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::es | mysql-bench | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::es | mysql-debuginfo | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::es | mysql-devel | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::es | mysql-server | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | mysql | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | mysql-bench | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | mysql-debuginfo | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | mysql-devel | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | mysql-server | 0 | 0:4.1.22-2.el4_8.3 |
| Red Hat:enterprise_linux:5::client | mysql | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client | mysql-bench | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client | mysql-debuginfo | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client | mysql-devel | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client | mysql-server | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client | mysql-test | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client_workstation | mysql | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-bench | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-debuginfo | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-devel | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-server | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-test | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::server | mysql | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::server | mysql-bench | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::server | mysql-debuginfo | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::server | mysql-devel | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::server | mysql-server | 0 | 0:5.0.77-3.el5 |
| Red Hat:enterprise_linux:5::server | mysql-test | 0 | 0:5.0.77-3.el5 |
| Red Hat:rhel_application_stack:2 | httpd | 0 | 0:2.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | httpd-debuginfo | 0 | 0:2.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | httpd-devel | 0 | 0:2.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | httpd-manual | 0 | 0:2.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mod_ssl | 0 | 1:2.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql | 0 | 0:5.0.84-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-bench | 0 | 0:5.0.84-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-cluster | 0 | 0:5.0.84-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-debuginfo | 0 | 0:5.0.84-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-devel | 0 | 0:5.0.84-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-libs | 0 | 0:5.0.84-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-server | 0 | 0:5.0.84-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-test | 0 | 0:5.0.84-2.el5s2 |
| Red Hat:rhel_application_stack:2 | perl-DBD-MySQL | 0 | 0:4.012-1.el5s2 |
| Red Hat:rhel_application_stack:2 | perl-DBD-MySQL-debuginfo | 0 | 0:4.012-1.el5s2 |
| Red Hat:rhel_application_stack:2 | perl-DBI | 0 | 0:1.609-1.el5s2 |
| Red Hat:rhel_application_stack:2 | perl-DBI-debuginfo | 0 | 0:1.609-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-bcmath | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-cli | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-common | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-dba | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-debuginfo | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-devel | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-gd | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-imap | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-ldap | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-mbstring | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-mysql | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-ncurses | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-odbc | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-pdo | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-pear | 0 | 1:1.8.1-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-pgsql | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-snmp | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-soap | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-xml | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | php-xmlrpc | 0 | 0:5.2.10-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-contrib | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-debuginfo | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-devel | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-docs | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-jdbc | 0 | 0:8.2.510-1jpp.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-jdbc-debuginfo | 0 | 0:8.2.510-1jpp.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-libs | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-plperl | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-plpython | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-pltcl | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-python | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-server | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-tcl | 0 | 0:8.2.14-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-test | 0 | 0:8.2.14-1.el5s2 |
Related vulnerabilities
- CVE-2009-4484 Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp… Also affects mysql-dfsg-5.0
- CVE-2009-4019 mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle… Also affects mysql-dfsg-5.0
- CVE-2008-0226 Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other… Also affects mysql-dfsg-5.0
- CVE-2007-5969 MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server… Also affects mysql-dfsg-5.0
- CVE-2007-5925 The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in… Also affects mysql-dfsg-5.0
- CVE-2007-3780 MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service… Also affects mysql-dfsg-5.0
- CVE-2007-2583 The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before… Also affects mysql-dfsg-5.0
- CVE-2010-3681 Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to… Also affects mysql-dfsg-5.0