CVE-2004-0956

Published: Jan 10, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.

Affected (32)

Products: Oracle: Mysql · Suse: Suse Linux · Ubuntu: Ubuntu Linux

1 product

1 product

1 product

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	Version 4.0.0
Oracle Mysql	Version 4.0.10
Oracle Mysql	Version 4.0.11
Oracle Mysql	Version 4.0.11 gamma
Oracle Mysql	Version 4.0.12
Oracle Mysql	Version 4.0.13
Oracle Mysql	Version 4.0.14
Oracle Mysql	Version 4.0.15
Oracle Mysql	Version 4.0.18
Oracle Mysql	Version 4.0.1
Oracle Mysql	Version 4.0.20
Oracle Mysql	Version 4.0.2
Oracle Mysql	Version 4.0.3
Oracle Mysql	Version 4.0.4
Oracle Mysql	Version 4.0.5
Oracle Mysql	Version 4.0.5a
Oracle Mysql	Version 4.0.6
Oracle Mysql	Version 4.0.7
Oracle Mysql	Version 4.0.7 gamma
Oracle Mysql	Version 4.0.8
Oracle Mysql	Version 4.0.8 gamma
Oracle Mysql	Version 4.0.9
Oracle Mysql	Version 4.0.9 gamma

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Suse Suse Linux	Version 8.0
Suse Suse Linux	Version 8.1
Suse Suse Linux	Version 8.2
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.1
Suse Suse Linux	Version 9.2
Ubuntu Ubuntu Linux	Version 4.1
Ubuntu Ubuntu Linux	Version 4.1