Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2009-2446

Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.

  • Published: Jul 13, 2009
  • Updated: Apr 13, 2023
  • CVE: CVE-2009-2446
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 8.5
  • AV:N/AC:M/Au:S/C:C/I:C/A:C

CWEs:

Software From Fixed in
mysql / mysql 5.0.5 5.0.5.x
mysql / mysql 5.0.10 5.0.10.x
mysql / mysql 4.1.23 4.1.23.x
mysql / mysql 5.0.54 5.0.54.x
mysql / mysql 5.0.0 5.0.0.x
mysql / mysql 5.0.15 5.0.15.x
mysql / mysql 5.0.17 5.0.17.x
mysql / mysql 4.1.13 4.1.13.x
mysql / mysql 5.0.5.0.21 5.0.5.0.21.x
mysql / mysql 5.0.3 5.0.3.x
mysql / mysql 4.1.15 4.1.15.x
mysql / mysql 4.1.8 4.1.8.x
mysql / mysql 5.0.44 5.0.44.x
mysql / mysql 5.0.66 5.0.66.x
mysql / mysql 4.1.14 4.1.14.x
mysql / mysql 5.0.56 5.0.56.x
mysql / mysql 4.1.12 4.1.12.x
mysql / mysql 4.1.10 4.1.10.x
mysql / mysql 5.0.60 5.0.60.x
mysql / mysql 5.0.24 5.0.24.x
mysql / mysql 5.0.2 5.0.2.x
mysql / mysql 5.0.22.1.0.1 5.0.22.1.0.1.x
mysql / mysql 5.0.30 5.0.30.x
mysql / mysql 5.0.20 5.0.20.x
mysql / mysql 5.0.1 5.0.1.x
mysql / mysql 4.1.0 4.1.0.x
mysql / mysql 5.0.4 5.0.4.x
mysql / mysql 4.1.3 4.1.3.x
mysql / mysql 5.0.82 5.0.82.x
mysql / mysql 5.0.36 5.0.36.x
mysql / mysql 5.0.16 5.0.16.x
mysql / mysql 4.1.2 4.1.2.x
oracle / mysql 4.0.0 4.0.0.x
oracle / mysql 4.0.1 4.0.1.x
oracle / mysql 4.0.2 4.0.2.x
oracle / mysql 4.0.3 4.0.3.x
oracle / mysql 4.0.4 4.0.4.x
oracle / mysql 4.0.5 4.0.5.x
oracle / mysql 4.0.5a 4.0.5a.x
oracle / mysql 4.0.6 4.0.6.x
oracle / mysql 4.0.7 4.0.7.x
oracle / mysql 4.0.7-gamma 4.0.7-gamma.x
oracle / mysql 4.0.8-gamma 4.0.8-gamma.x
oracle / mysql 4.0.8 4.0.8.x
oracle / mysql 4.0.9 4.0.9.x
oracle / mysql 4.0.9-gamma 4.0.9-gamma.x
oracle / mysql 4.0.10 4.0.10.x
oracle / mysql 4.0.11-gamma 4.0.11-gamma.x
oracle / mysql 4.0.11 4.0.11.x
oracle / mysql 4.0.12 4.0.12.x
oracle / mysql 4.0.13 4.0.13.x
oracle / mysql 4.0.14 4.0.14.x
oracle / mysql 4.0.15 4.0.15.x
oracle / mysql 4.0.16 4.0.16.x
oracle / mysql 4.0.17 4.0.17.x
oracle / mysql 4.0.18 4.0.18.x
oracle / mysql 4.0.19 4.0.19.x
oracle / mysql 5.0.50 5.0.50.x
oracle / mysql 5.0.51 5.0.51.x
oracle / mysql 5.0.51a 5.0.51a.x
oracle / mysql 4.0.20 4.0.20.x
oracle / mysql 4.0.21 4.0.21.x
oracle / mysql 4.0.23 4.0.23.x
oracle / mysql 4.0.24 4.0.24.x
oracle / mysql 4.0.25 4.0.25.x
oracle / mysql 4.0.26 4.0.26.x
oracle / mysql 4.0.27 4.0.27.x
oracle / mysql 4.1.0-alpha 4.1.0-alpha.x
oracle / mysql 4.1.1 4.1.1.x
oracle / mysql 4.1.2-alpha 4.1.2-alpha.x
oracle / mysql 4.1.3-beta 4.1.3-beta.x
oracle / mysql 4.1.4 4.1.4.x
oracle / mysql 4.1.5 4.1.5.x
oracle / mysql 4.1.6 4.1.6.x
oracle / mysql 4.1.7 4.1.7.x
oracle / mysql 4.1.9 4.1.9.x
oracle / mysql 4.1.11 4.1.11.x
oracle / mysql 4.1.16 4.1.16.x
oracle / mysql 4.1.17 4.1.17.x
oracle / mysql 4.1.18 4.1.18.x
oracle / mysql 4.1.19 4.1.19.x
oracle / mysql 4.1.20 4.1.20.x
oracle / mysql 4.1.21 4.1.21.x
oracle / mysql 4.1.22 4.1.22.x
oracle / mysql 5.0.0-alpha 5.0.0-alpha.x
oracle / mysql 5.0.3-beta 5.0.3-beta.x
oracle / mysql 5.0.6 5.0.6.x
oracle / mysql 5.0.11 5.0.11.x
oracle / mysql 5.0.12 5.0.12.x
oracle / mysql 5.0.13 5.0.13.x
oracle / mysql 5.0.14 5.0.14.x
oracle / mysql 5.0.18 5.0.18.x
oracle / mysql 5.0.19 5.0.19.x
oracle / mysql 5.0.21 5.0.21.x
oracle / mysql 5.0.22 5.0.22.x
oracle / mysql 5.0.23 5.0.23.x
oracle / mysql 5.0.25 5.0.25.x
oracle / mysql 5.0.26 5.0.26.x
oracle / mysql 5.0.27 5.0.27.x
oracle / mysql 5.0.30-sp1 5.0.30-sp1.x
oracle / mysql 5.0.32 5.0.32.x
oracle / mysql 5.0.33 5.0.33.x
oracle / mysql 5.0.37 5.0.37.x
oracle / mysql 5.0.38 5.0.38.x
oracle / mysql 5.0.41 5.0.41.x
oracle / mysql 5.0.42 5.0.42.x
oracle / mysql 5.0.45 5.0.45.x
oracle / mysql 5.0.52 5.0.52.x
oracle / mysql 5.0.7 5.0.7.x
oracle / mysql 5.0.8 5.0.8.x
oracle / mysql 5.0.75 5.0.75.x
oracle / mysql 5.0.77 5.0.77.x
oracle / mysql 5.0.81 5.0.81.x
oracle / mysql 5.0.9 5.0.9.x
oracle / mysql 5.0.83 5.0.83.x