CVE-2006-3081

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

🔗 References (44)

• cve@mitrehttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=373913
• cve@mitrehttp://bugs.mysql.com/bug.php?id=15828
• cve@mitrehttp://docs.info.apple.com/article.html?artnum=305214
• cve@mitrehttp://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
• cve@mitrehttp://seclists.org/lists/fulldisclosure/2006/Jun/0434.html
• cve@mitrehttp://secunia.com/advisories/19929
• cve@mitrehttp://secunia.com/advisories/20832
• cve@mitrehttp://secunia.com/advisories/20871
• cve@mitrehttp://secunia.com/advisories/24479
• cve@mitrehttp://www.debian.org/security/2006/dsa-1112
• cve@mitrehttp://www.mandriva.com/security/advisories?name=MDKSA-2006:111
• cve@mitrehttp://www.redhat.com/support/errata/RHSA-2007-0083.html
• cve@mitrehttp://www.securityfocus.com/archive/1/437145
• cve@mitrehttp://www.securityfocus.com/archive/1/437277
• cve@mitrehttp://www.securityfocus.com/archive/1/437571/100/0/threaded