CVE-2009-2446

Published: Jul 13, 2009Modified: Apr 23, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.

Affected (115)

Products: Mysql: Mysql · Oracle: Mysql

1 product

1 product

Configuration A

115 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Version 4.1.0
Mysql Mysql	Version 4.1.10
Mysql Mysql	Version 4.1.12
Mysql Mysql	Version 4.1.13
Mysql Mysql	Version 4.1.14
Mysql Mysql	Version 4.1.15
Mysql Mysql	Version 4.1.23
Mysql Mysql	Version 4.1.2
Mysql Mysql	Version 4.1.3
Mysql Mysql	Version 4.1.8
Mysql Mysql	Version 5.0.0
Mysql Mysql	Version 5.0.10
Mysql Mysql	Version 5.0.15
Mysql Mysql	Version 5.0.16
Mysql Mysql	Version 5.0.17
Mysql Mysql	Version 5.0.1
Mysql Mysql	Version 5.0.20
Mysql Mysql	Version 5.0.22.1.0.1
Mysql Mysql	Version 5.0.24
Mysql Mysql	Version 5.0.2
Mysql Mysql	Version 5.0.30
Mysql Mysql	Version 5.0.36
Mysql Mysql	Version 5.0.3
Mysql Mysql	Version 5.0.44
Mysql Mysql	Version 5.0.4
Mysql Mysql	Version 5.0.5.0.21
Mysql Mysql	Version 5.0.54
Mysql Mysql	Version 5.0.56
Mysql Mysql	Version 5.0.5
Mysql Mysql	Version 5.0.60
Mysql Mysql	Version 5.0.66
Mysql Mysql	Version 5.0.82
Oracle Mysql	Version 4.0.0
Oracle Mysql	Version 4.0.10
Oracle Mysql	Version 4.0.11
Oracle Mysql	Version 4.0.11 gamma
Oracle Mysql	Version 4.0.12
Oracle Mysql	Version 4.0.13
Oracle Mysql	Version 4.0.14
Oracle Mysql	Version 4.0.15
Oracle Mysql	Version 4.0.16
Oracle Mysql	Version 4.0.17
Oracle Mysql	Version 4.0.18
Oracle Mysql	Version 4.0.19
Oracle Mysql	Version 4.0.1
Oracle Mysql	Version 4.0.20
Oracle Mysql	Version 4.0.21
Oracle Mysql	Version 4.0.23
Oracle Mysql	Version 4.0.24
Oracle Mysql	Version 4.0.25
Oracle Mysql	Version 4.0.26
Oracle Mysql	Version 4.0.27
Oracle Mysql	Version 4.0.2
Oracle Mysql	Version 4.0.3
Oracle Mysql	Version 4.0.4
Oracle Mysql	Version 4.0.5
Oracle Mysql	Version 4.0.5a
Oracle Mysql	Version 4.0.6
Oracle Mysql	Version 4.0.7
Oracle Mysql	Version 4.0.7 gamma
Oracle Mysql	Version 4.0.8
Oracle Mysql	Version 4.0.8 gamma
Oracle Mysql	Version 4.0.9
Oracle Mysql	Version 4.0.9 gamma
Oracle Mysql	Version 4.1.0 alpha
Oracle Mysql	Version 4.1.11
Oracle Mysql	Version 4.1.16
Oracle Mysql	Version 4.1.17
Oracle Mysql	Version 4.1.18
Oracle Mysql	Version 4.1.19
Oracle Mysql	Version 4.1.1
Oracle Mysql	Version 4.1.20
Oracle Mysql	Version 4.1.21
Oracle Mysql	Version 4.1.22
Oracle Mysql	Version 4.1.2 alpha
Oracle Mysql	Version 4.1.3 beta
Oracle Mysql	Version 4.1.4
Oracle Mysql	Version 4.1.5
Oracle Mysql	Version 4.1.6
Oracle Mysql	Version 4.1.7
Oracle Mysql	Version 4.1.9
Oracle Mysql	Version 5.0.0 alpha
Oracle Mysql	Version 5.0.11
Oracle Mysql	Version 5.0.12
Oracle Mysql	Version 5.0.13
Oracle Mysql	Version 5.0.14
Oracle Mysql	Version 5.0.18
Oracle Mysql	Version 5.0.19
Oracle Mysql	Version 5.0.21
Oracle Mysql	Version 5.0.22
Oracle Mysql	Version 5.0.23
Oracle Mysql	Version 5.0.25
Oracle Mysql	Version 5.0.26
Oracle Mysql	Version 5.0.27
Oracle Mysql	Version 5.0.30 sp1
Oracle Mysql	Version 5.0.32
Oracle Mysql	Version 5.0.33
Oracle Mysql	Version 5.0.37
Oracle Mysql	Version 5.0.38
Oracle Mysql	Version 5.0.3 beta
Oracle Mysql	Version 5.0.41
Oracle Mysql	Version 5.0.42
Oracle Mysql	Version 5.0.45
Oracle Mysql	Version 5.0.50
Oracle Mysql	Version 5.0.51
Oracle Mysql	Version 5.0.51a
Oracle Mysql	Version 5.0.52
Oracle Mysql	Version 5.0.6
Oracle Mysql	Version 5.0.75
Oracle Mysql	Version 5.0.77
Oracle Mysql	Version 5.0.7
Oracle Mysql	Version 5.0.81
Oracle Mysql	Version 5.0.83
Oracle Mysql	Version 5.0.8
Oracle Mysql	Version 5.0.9