CVE-2006-3469 - CVE House
Back to Database
Status published Medium CVE-2006-3469

Format string vulnerability in time.cc in MySQL Server 4.1 before...

Vulnerability Description

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3469

Credits & Attribution

No credits recorded in the NVD database.

References

More from mysql

View All →
CVE-2013-1492
Buffer overflow in yaSSL, as used in MySQL 5.1.x before...
High 7.5
CVE-2012-2749
MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote...
Medium 4
CVE-2012-2102
MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote...
Low 3.5
CVE-2012-1696
Unspecified vulnerability in the MySQL Server component in Oracle MySQL...
Medium 4
CVE-2012-0583
Unspecified vulnerability in the MySQL Server component in Oracle MySQL...
Medium 4

Affected Vendor

Affected Software

mysql
Vulnerable Versions:
4.1.8, 4.1.12, 4.1.13, 4.1.14, 4.1.15, 5.0.5.0.21, 5.0.10, 5.0.15, 5.0.16, 5.0.17, 4.1.6, 4.1.7, 4.1.9, 4.1.11, 4.1.16, 4.1.18, 4.1.19, 4.1.20, 5.0.6, 5.0.9, 5.0.11, 5.0.12, 5.0.13, 5.0.18, 5.0.19

Timeline

Official Publish: July 18th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.