CVE-2006-3469 (GCVE-0-2006-3469)

Vulnerability from cvelistv5 – Published: 2006-07-18 23:00 – Updated: 2024-08-07 18:30
VLAI
Summary
Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
http://www.us-cert.gov/cas/techalerts/TA07-072A.html third-party-advisoryx_refsource_CERT
http://security.gentoo.org/glsa/glsa-200608-09.xml vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/19032 vdb-entryx_refsource_BID
http://lists.apple.com/archives/security-announce… vendor-advisoryx_refsource_APPLE
http://secunia.com/advisories/31226 third-party-advisoryx_refsource_SECUNIA
http://docs.info.apple.com/article.html?artnum=305214 x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2008-07… vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-321-1 vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/21147 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21366 third-party-advisoryx_refsource_SECUNIA
http://bugs.mysql.com/bug.php?id=20729 x_refsource_MISC
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694 x_refsource_MISC
https://oval.cisecurity.org/repository/search/def… vdb-entrysignaturex_refsource_OVAL
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html x_refsource_CONFIRM
http://www.debian.org/security/2006/dsa-1112 vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2007/0930 vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/24479 third-party-advisoryx_refsource_SECUNIA
Date Public
2006-07-18 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:34.063Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "TA07-072A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
          },
          {
            "name": "GLSA-200608-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200608-09.xml"
          },
          {
            "name": "19032",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19032"
          },
          {
            "name": "APPLE-SA-2007-03-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
          },
          {
            "name": "31226",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31226"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=305214"
          },
          {
            "name": "RHSA-2008:0768",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0768.html"
          },
          {
            "name": "USN-321-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-321-1"
          },
          {
            "name": "21147",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21147"
          },
          {
            "name": "21366",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21366"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.mysql.com/bug.php?id=20729"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694"
          },
          {
            "name": "oval:org.mitre.oval:def:9827",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html"
          },
          {
            "name": "DSA-1112",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1112"
          },
          {
            "name": "ADV-2007-0930",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0930"
          },
          {
            "name": "24479",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24479"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-07-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "TA07-072A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
        },
        {
          "name": "GLSA-200608-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200608-09.xml"
        },
        {
          "name": "19032",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19032"
        },
        {
          "name": "APPLE-SA-2007-03-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
        },
        {
          "name": "31226",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31226"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=305214"
        },
        {
          "name": "RHSA-2008:0768",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0768.html"
        },
        {
          "name": "USN-321-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-321-1"
        },
        {
          "name": "21147",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21147"
        },
        {
          "name": "21366",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21366"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.mysql.com/bug.php?id=20729"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694"
        },
        {
          "name": "oval:org.mitre.oval:def:9827",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html"
        },
        {
          "name": "DSA-1112",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1112"
        },
        {
          "name": "ADV-2007-0930",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0930"
        },
        {
          "name": "24479",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24479"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3469",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "TA07-072A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
            },
            {
              "name": "GLSA-200608-09",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200608-09.xml"
            },
            {
              "name": "19032",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19032"
            },
            {
              "name": "APPLE-SA-2007-03-13",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
            },
            {
              "name": "31226",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31226"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=305214",
              "refsource": "CONFIRM",
              "url": "http://docs.info.apple.com/article.html?artnum=305214"
            },
            {
              "name": "RHSA-2008:0768",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0768.html"
            },
            {
              "name": "USN-321-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-321-1"
            },
            {
              "name": "21147",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21147"
            },
            {
              "name": "21366",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21366"
            },
            {
              "name": "http://bugs.mysql.com/bug.php?id=20729",
              "refsource": "MISC",
              "url": "http://bugs.mysql.com/bug.php?id=20729"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694",
              "refsource": "MISC",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694"
            },
            {
              "name": "oval:org.mitre.oval:def:9827",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827"
            },
            {
              "name": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html",
              "refsource": "CONFIRM",
              "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html"
            },
            {
              "name": "DSA-1112",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1112"
            },
            {
              "name": "ADV-2007-0930",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0930"
            },
            {
              "name": "24479",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24479"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3469",
    "datePublished": "2006-07-18T23:00:00.000Z",
    "dateReserved": "2006-07-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T18:30:34.063Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2006-3469",
      "date": "2026-09-25",
      "epss": "0.28998",
      "percentile": "0.98098"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
                  "matchCriteriaId": "ADBEDF5A-5205-4012-B9B8-0FA304E7119A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
                  "matchCriteriaId": "8AC969A5-52CC-44F2-A929-DE559A5D7624",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
                  "matchCriteriaId": "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
                  "matchCriteriaId": "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C93CE88F-2941-4A08-9472-359CF214F81C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*",
                  "matchCriteriaId": "BDA03768-74D2-4C5D-ABCF-8A91F9E6C273",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
                  "matchCriteriaId": "542B23CB-7535-4EF7-B926-466A5161A0D4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
                  "matchCriteriaId": "45E686C3-4100-465C-9F45-068580B496E5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
                  "matchCriteriaId": "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DB618DB2-6B00-4E99-8232-937D2C51986B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "66C06765-D153-4D4D-B8CD-DB2E386E082B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
                  "matchCriteriaId": "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
                  "matchCriteriaId": "141D83A9-89C2-456F-B70D-F274EBE3EAC7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
                  "matchCriteriaId": "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E6769975-47A4-4D0A-9181-F59776D13D38",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
                  "matchCriteriaId": "0E241159-FAA4-4DCF-AB68-BE36DF95D59A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DB6995B6-B594-454B-BD26-EACFB8241DA2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:4.1.20:*:*:*:*:*:*:*",
                  "matchCriteriaId": "AC14E107-7C11-4D5B-994B-CCACFD62097E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "1668BB5B-E7FB-4430-B8D5-89E308F5DD39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
                  "matchCriteriaId": "7777E919-FD4B-452B-88D7-165410C703F2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
                  "matchCriteriaId": "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
                  "matchCriteriaId": "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
                  "matchCriteriaId": "BF54CC8D-B736-461D-B693-686E862EF969",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
                  "matchCriteriaId": "053ACE9B-A146-42C0-ADB2-47F6119965D8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*",
                  "matchCriteriaId": "30B4F891-2A03-45A8-A49C-7F8B8F7D8407",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message."
        },
        {
          "lang": "es",
          "value": "Vulnerabilidad de cadena de formato en time.cc de MySQL Server 4.1 anterior a 4.1.21 y 5.0 anterior al 1 de abril de 2006 permite a usuarios autenticados remotamente provocar una denegaci\u00f3n de servicio (ca\u00edda) mediante una cadena de formato en lugar de una fecha como el primer par\u00e1metro para la funci\u00f3n date_format, la cual es posteriormente utilizada en una llamada de escritura formateada para mostrar el mensaje de error."
        }
      ],
      "id": "CVE-2006-3469",
      "lastModified": "2024-11-21T00:13:41.040",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "SINGLE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 4.0,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 8.0,
            "impactScore": 2.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2006-07-21T14:03:00.000",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://bugs.mysql.com/bug.php?id=20729"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://docs.info.apple.com/article.html?artnum=305214"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/21147"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/21366"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/24479"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/31226"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://security.gentoo.org/glsa/glsa-200608-09.xml"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1112"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0768.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/19032"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.ubuntu.com/usn/usn-321-1"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0930"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://bugs.mysql.com/bug.php?id=20729"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://docs.info.apple.com/article.html?artnum=305214"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/21147"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/21366"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/24479"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/31226"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://security.gentoo.org/glsa/glsa-200608-09.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1112"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0768.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/19032"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.ubuntu.com/usn/usn-321-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0930"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vendorComments": [
        {
          "comment": "This issue was addressed in mysql packages as shipped in Red Hat Enterprise Linux 4 via:\n\nhttps://rhn.redhat.com/errata/RHSA-2008-0768.html\n\nThis issue did not affect mysql packages as shipped with Red Hat Enterprise Linux 2.1, 3, or 5, and Red Hat Application Stack v1 and v2.",
          "lastModified": "2008-07-25T00:00:00",
          "organization": "Red Hat"
        }
      ],
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-134"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ADBEDF5A-5205-4012-B9B8-0FA304E7119A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8AC969A5-52CC-44F2-A929-DE559A5D7624",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C93CE88F-2941-4A08-9472-359CF214F81C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BDA03768-74D2-4C5D-ABCF-8A91F9E6C273",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "542B23CB-7535-4EF7-B926-466A5161A0D4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
                    "matchCriteriaId": "45E686C3-4100-465C-9F45-068580B496E5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DB618DB2-6B00-4E99-8232-937D2C51986B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "66C06765-D153-4D4D-B8CD-DB2E386E082B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "141D83A9-89C2-456F-B70D-F274EBE3EAC7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E6769975-47A4-4D0A-9181-F59776D13D38",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0E241159-FAA4-4DCF-AB68-BE36DF95D59A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DB6995B6-B594-454B-BD26-EACFB8241DA2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:4.1.20:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AC14E107-7C11-4D5B-994B-CCACFD62097E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1668BB5B-E7FB-4430-B8D5-89E308F5DD39",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7777E919-FD4B-452B-88D7-165410C703F2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF54CC8D-B736-461D-B693-686E862EF969",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
                    "matchCriteriaId": "053ACE9B-A146-42C0-ADB2-47F6119965D8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*",
                    "matchCriteriaId": "30B4F891-2A03-45A8-A49C-7F8B8F7D8407",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message."
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad de cadena de formato en time.cc de MySQL Server 4.1 anterior a 4.1.21 y 5.0 anterior al 1 de abril de 2006 permite a usuarios autenticados remotamente provocar una denegaci\u00f3n de servicio (ca\u00edda) mediante una cadena de formato en lugar de una fecha como el primer par\u00e1metro para la funci\u00f3n date_format, la cual es posteriormente utilizada en una llamada de escritura formateada para mostrar el mensaje de error."
          }
        ],
        "id": "CVE-2006-3469",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 4.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2006-07-21T14:03:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://bugs.mysql.com/bug.php?id=20729"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://docs.info.apple.com/article.html?artnum=305214"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21147"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21366"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24479"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/31226"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://security.gentoo.org/glsa/glsa-200608-09.xml"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1112"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0768.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/19032"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.ubuntu.com/usn/usn-321-1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0930"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.mysql.com/bug.php?id=20729"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://docs.info.apple.com/article.html?artnum=305214"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21147"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21366"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24479"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/31226"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://security.gentoo.org/glsa/glsa-200608-09.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1112"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0768.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/19032"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-321-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0930"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vendorComments": [
          {
            "comment": "This issue was addressed in mysql packages as shipped in Red Hat Enterprise Linux 4 via:\n\nhttps://rhn.redhat.com/errata/RHSA-2008-0768.html\n\nThis issue did not affect mysql packages as shipped with Red Hat Enterprise Linux 2.1, 3, or 5, and Red Hat Application Stack v1 and v2.",
            "lastModified": "2008-07-25T00:00:00",
            "organization": "Red Hat"
          }
        ],
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-134"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-01-08T03:44:27+00:00",
      "cve": "CVE-2006-3469",
      "id": "CVE-2006-3469",
      "initial_release_date": "2006-06-27T00:00:00+00:00",
      "product_status:fixed": "132",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "mysql server DoS",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2006/cve-2006-3469.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2025-04-25T14:44:55Z",
      "cve": "CVE-2006-3469",
      "id": "CVE-2006-3469",
      "initial_release_date": "2023-02-15T06:14:51Z",
      "product_status:known_not_affected": "3",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2006-3469",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2006-3469.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.