CVE-2006-2753

Published: Jun 1, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.

Affected (42)

Products: Mysql: Mysql · Oracle: Mysql

1 product

1 product

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Version 4.1.0
Mysql Mysql	Version 4.1.10
Mysql Mysql	Version 4.1.12
Mysql Mysql	Version 4.1.13
Mysql Mysql	Version 4.1.14
Mysql Mysql	Version 4.1.15
Mysql Mysql	Version 4.1.2
Mysql Mysql	Version 4.1.3
Mysql Mysql	Version 4.1.8
Mysql Mysql	Version 5.0.0
Mysql Mysql	Version 5.0.10
Mysql Mysql	Version 5.0.15
Mysql Mysql	Version 5.0.16
Mysql Mysql	Version 5.0.17
Mysql Mysql	Version 5.0.1
Mysql Mysql	Version 5.0.20
Mysql Mysql	Version 5.0.2
Mysql Mysql	Version 5.0.3
Mysql Mysql	Version 5.0.4
Mysql Mysql	Version 5.0.5
Oracle Mysql	Version 4.1.11
Oracle Mysql	Version 4.1.16
Oracle Mysql	Version 4.1.17
Oracle Mysql	Version 4.1.18
Oracle Mysql	Version 4.1.19
Oracle Mysql	Version 4.1.1
Oracle Mysql	Version 4.1.4
Oracle Mysql	Version 4.1.5
Oracle Mysql	Version 4.1.6
Oracle Mysql	Version 4.1.7
Oracle Mysql	Version 4.1.9
Oracle Mysql	Version 5.0.11
Oracle Mysql	Version 5.0.12
Oracle Mysql	Version 5.0.13
Oracle Mysql	Version 5.0.14
Oracle Mysql	Version 5.0.18
Oracle Mysql	Version 5.0.19
Oracle Mysql	Version 5.0.21
Oracle Mysql	Version 5.0.6
Oracle Mysql	Version 5.0.7
Oracle Mysql	Version 5.0.8
Oracle Mysql	Version 5.0.9

References (52)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369735

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=305214

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Source: secalert@redhat.com

http://lists.mysql.com/announce/364

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/20365

Source: secalert@redhat.com

http://secunia.com/advisories/20489

Source: secalert@redhat.com

http://secunia.com/advisories/20531

Source: secalert@redhat.com

http://secunia.com/advisories/20541

Source: secalert@redhat.com

http://secunia.com/advisories/20562

Source: secalert@redhat.com

http://secunia.com/advisories/20625

Source: secalert@redhat.com

http://secunia.com/advisories/20712

Source: secalert@redhat.com

http://secunia.com/advisories/24479

Source: secalert@redhat.com

http://securitytracker.com/id?1016216

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1092

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200606-13.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:097

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0544.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/18219

Source: secalert@redhat.com

http://www.trustix.org/errata/2006/0034/

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-288-3

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2006/2105

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0930

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/26875

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10312

Source: secalert@redhat.com

https://usn.ubuntu.com/303-1/

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369735

Source: af854a3a-2127-422b-91ae-364da2661108

http://docs.info.apple.com/article.html?artnum=305214

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.mysql.com/announce/364

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/20365

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20489

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20531

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20541

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20562

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20625

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20712

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24479

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016216

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1092

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200606-13.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:097

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0544.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18219

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.trustix.org/errata/2006/0034/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-288-3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/2105

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0930

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26875

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10312

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/303-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.