NVD

Id
3825  
Name
CVE-2008-3963  
Description
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b"" (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-09-10  
Modified Date
2013-01-22  
Seq
2008-3963  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24214 3825 CVE-2008-3963 http://bugs.mysql.com/bug.php?id=35658  View
24215 3825 CVE-2008-3963 http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-66.html  View
24216 3825 CVE-2008-3963 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-26.html  View
24217 3825 CVE-2008-3963 http://dev.mysql.com/doc/refman/6.0/en/news-6-0-6.html  View
24218 3825 CVE-2008-3963 SUSE-SR:2008:025  View
24219 3825 CVE-2008-3963 oval:org.mitre.oval:def:10521  View
24220 3825 CVE-2008-3963 DSA-1783  View
24221 3825 CVE-2008-3963 MDVSA-2009:094  View
24222 3825 CVE-2008-3963 [oss-security] 20080909 CVE request: MySQL empty bit-string literal server crash  View
24223 3825 CVE-2008-3963 [oss-security] 20080909 Re: CVE request: MySQL empty bit-string literal server crash  View
24224 3825 CVE-2008-3963 RHSA-2009:1067  View
24225 3825 CVE-2008-3963 RHSA-2009:1289  View
24226 3825 CVE-2008-3963 1020858  View
24227 3825 CVE-2008-3963 USN-671-1  View
24228 3825 CVE-2008-3963 ADV-2008-2554  View
24229 3825 CVE-2008-3963 mysql-bitstring-dos(45042)  View
24230 3825 CVE-2008-3963 https://bugs.gentoo.org/237166  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47113 JVNDB-2008-002423 MySQL におけるサービス運用妨害 (DoS) の脆弱性 MySQL には、b"" トークンの取り扱いに不備が存在するため、SQL 命令でこのトークンが使用された場合に、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-3963 34076 CVE-2008-3963 3825 4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002423.html 2008-09-11 2009-10-09 View