NVD

Id
49691  
Name
CVE-2009-2446  
Description
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-13  
Modified Date
2013-01-22  
Seq
2009-2446  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251170 49691 CVE-2009-2446 20090708 MySQL <= 5.0.45 post auth format string vulnerability  View
251171 49691 CVE-2009-2446 APPLE-SA-2010-03-29-1  View
251172 49691 CVE-2009-2446 oval:org.mitre.oval:def:11857  View
251173 49691 CVE-2009-2446 1022533  View
251174 49691 CVE-2009-2446 http://support.apple.com/kb/HT4077  View
251175 49691 CVE-2009-2446 USN-897-1  View
251176 49691 CVE-2009-2446 MDVSA-2009:179  View
251177 49691 CVE-2009-2446 RHSA-2009:1289  View
251178 49691 CVE-2009-2446 RHSA-2010:0110  View
251179 49691 CVE-2009-2446 20090708 MySQL <= 5.0.45 post auth format string vulnerability  View
251180 49691 CVE-2009-2446 35609  View
251181 49691 CVE-2009-2446 ADV-2009-1857  View
251182 49691 CVE-2009-2446 mysql-dispatchcommand-format-string(51614)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41007 JVNDB-2009-002013 MySQL の dispatch_command 関数におけるサービス運用妨害 (DoS) の脆弱性 MySQL の mysqld にある dispatch_command 関数には、COM_CREATE_DB または COM_DROP_DB リクエスト内のデータベース名に含まれる書式文字列の処理に不備があるため、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。 CVE-2009-2446 39877 CVE-2009-2446 49691 8.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002013.html 2009-07-07 2011-02-01 View