CVE-2008-3963
Published: 11 September 2008
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
mysql-dfsg-5.0 Launchpad, Ubuntu, Debian |
dapper |
Released
(5.0.22-0ubuntu6.06.11)
|
| feisty |
Ignored
(end of life, was needed)
|
|
| gutsy |
Released
(5.0.45-1ubuntu3.4)
|
|
| hardy |
Released
(5.0.51a-3ubuntu5.4)
|
|
| intrepid |
Not vulnerable
(5.0.67-0ubuntu6)
|
|
| upstream |
Released
(5.0.66)
|
|
|
Patches: other: http://bugs.mysql.com/bug.php?id=35658 |
||