Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mysql: format string bug

Package(s):

mysql

CVE #(s):

CVE-2006-3469

Created:

July 21, 2006

Updated:

July 30, 2008

Description:

Jean-David Maillefer discovered a format string bug in the date_format() function's error reporting. By calling the function with invalid arguments, an authenticated user could exploit this to crash the server.

Alerts:

Red Hat	RHSA-2008:0768-01	2008-07-24
Slackware	SSA:2006-211-01	2006-07-31
Ubuntu	USN-321-1	2006-07-21

(Log in to post comments)