CVE-2006-3469

MySQL 4.x/5.x - Server Date_Format Denial of Service

Severity Score

6.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.

Vulnerabilidad de cadena de formato en time.cc de MySQL Server 4.1 anterior a 4.1.21 y 5.0 anterior al 1 de abril de 2006 permite a usuarios autenticados remotamente provocar una denegación de servicio (caída) mediante una cadena de formato en lugar de una fecha como el primer parámetro para la función date_format, la cual es posteriormente utilizada en una llamada de escritura formateada para mostrar el mensaje de error.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-07-10 CVE Reserved
2006-07-18 CVE Published
2006-07-18 First Exploit
2024-08-07 CVE Updated
2025-06-20 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-134: Use of Externally-Controlled Format String

CAPEC

References (20)

URL	Tag	Source
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694	X_refsource_misc
http://bugs.mysql.com/bug.php?id=20729	X_refsource_misc
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html	X_refsource_confirm
http://docs.info.apple.com/article.html?artnum=305214	X_refsource_confirm
http://www.securityfocus.com/bid/19032	Vdb Entry
http://www.us-cert.gov/cas/techalerts/TA07-072A.html	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/28234	2006-07-18

URL	Date	SRC
http://www.debian.org/security/2006/dsa-1112	2019-12-17

URL	Date	SRC
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html	2019-12-17
http://secunia.com/advisories/21147	2019-12-17
http://secunia.com/advisories/21366	2019-12-17
http://secunia.com/advisories/24479	2019-12-17
http://secunia.com/advisories/31226	2019-12-17
http://security.gentoo.org/glsa/glsa-200608-09.xml	2019-12-17
http://www.redhat.com/support/errata/RHSA-2008-0768.html	2019-12-17
http://www.ubuntu.com/usn/usn-321-1	2019-12-17
http://www.vupen.com/english/advisories/2007/0930	2019-12-17
https://access.redhat.com/security/cve/CVE-2006-3469	2008-07-24
https://bugzilla.redhat.com/show_bug.cgi?id=201904	2008-07-24

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				4.1.8 Search vendor "Mysql" for product "Mysql" and version "4.1.8"		-		Affected
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				4.1.12 Search vendor "Mysql" for product "Mysql" and version "4.1.12"		-		Affected
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				4.1.13 Search vendor "Mysql" for product "Mysql" and version "4.1.13"		-		Affected
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				4.1.14 Search vendor "Mysql" for product "Mysql" and version "4.1.14"		-		Affected
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				4.1.15 Search vendor "Mysql" for product "Mysql" and version "4.1.15"		-		Affected
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				5.0.5.0.21 Search vendor "Mysql" for product "Mysql" and version "5.0.5.0.21"		-		Affected
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				5.0.10 Search vendor "Mysql" for product "Mysql" and version "5.0.10"		-		Affected
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				5.0.15 Search vendor "Mysql" for product "Mysql" and version "5.0.15"		-		Affected
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				5.0.16 Search vendor "Mysql" for product "Mysql" and version "5.0.16"		-		Affected
Mysql Search vendor "Mysql"		Mysql Search vendor "Mysql" for product "Mysql"				5.0.17 Search vendor "Mysql" for product "Mysql" and version "5.0.17"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				4.1.6 Search vendor "Oracle" for product "Mysql" and version "4.1.6"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				4.1.7 Search vendor "Oracle" for product "Mysql" and version "4.1.7"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				4.1.9 Search vendor "Oracle" for product "Mysql" and version "4.1.9"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				4.1.11 Search vendor "Oracle" for product "Mysql" and version "4.1.11"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				4.1.16 Search vendor "Oracle" for product "Mysql" and version "4.1.16"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				4.1.18 Search vendor "Oracle" for product "Mysql" and version "4.1.18"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				4.1.19 Search vendor "Oracle" for product "Mysql" and version "4.1.19"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				4.1.20 Search vendor "Oracle" for product "Mysql" and version "4.1.20"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				5.0.6 Search vendor "Oracle" for product "Mysql" and version "5.0.6"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				5.0.9 Search vendor "Oracle" for product "Mysql" and version "5.0.9"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				5.0.11 Search vendor "Oracle" for product "Mysql" and version "5.0.11"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				5.0.12 Search vendor "Oracle" for product "Mysql" and version "5.0.12"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				5.0.13 Search vendor "Oracle" for product "Mysql" and version "5.0.13"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				5.0.18 Search vendor "Oracle" for product "Mysql" and version "5.0.18"		-		Affected
Oracle Search vendor "Oracle"		Mysql Search vendor "Oracle" for product "Mysql"				5.0.19 Search vendor "Oracle" for product "Mysql" and version "5.0.19"		-		Affected