vulnwire
4.0med

CVE-2008-39631 exploit

MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
4.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.5%
percentile 94%
Public exploits
1
Exploit-DB

MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.

Exploit prediction (EPSS)

6.46% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

  • EDB-32348 MySQL 6.0.4 - Empty Binary String Literal Remote Denial of Service · dos · 2008-03-28

CVSS scores

Assigned byVersionScoreVector
NVD2.04.0AV:N/AC:L/Au:S/C:N/I:N/A:P

Classification

Weakness
  • CWE-134 Use of Externally-Controlled Format String
Technology feeds
MySQL (RSS, critical only)

References

  • bugs.mysql.com /bug.php?id=35658 · x_refsource_CONFIRM, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2009:094 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • dev.mysql.com /doc/refman/5.1/en/news-5-1-26.html · x_refsource_CONFIRM, x_transferred
  • ubuntu.com /usn/USN-1397-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • redhat.com /support/errata/RHSA-2009-1067.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • dev.mysql.com /doc/refman/5.0/en/releasenotes-es-5-0-66.html · x_refsource_CONFIRM, x_transferred
  • dev.mysql.com /doc/refman/6.0/en/news-6-0-6.html · x_refsource_CONFIRM, x_transferred
  • openwall.com /lists/oss-security/2008/09/09/7 · mailing-list, x_refsource_MLIST, x_transferred
  • vupen.com /english/advisories/2008/2554 · vdb-entry, x_refsource_VUPEN, x_transferred
  • ubuntu.com /usn/USN-671-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • bugs.gentoo.org /237166 · x_refsource_CONFIRM, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/45042 · vdb-entry, x_refsource_XF, x_transferred
  • debian.org /security/2009/dsa-1783 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • redhat.com /support/errata/RHSA-2009-1289.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/32769 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/32759 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/34907 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • openwall.com /lists/oss-security/2008/09/09/4 · mailing-list, x_refsource_MLIST, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2008-11/msg00001.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/36566 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/31769 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1020858 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10521 · vdb-entry, signature, x_refsource_OVAL, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.