National Vulnerability Database (NVD) National Vulnerability Database (CVE-2006-0903)

National Cyber-Alert System

Vulnerability Summary for CVE-2006-0903

Original release date:02/27/2006

Last revised:03/08/2011

Source: US-CERT/NIST

Overview

MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS v2 Base Score:4.6 (MEDIUM) (AV:L/AC:L/Au:N/C:P/I:P/A:P) (legend)

Impact Subscore: 6.4

Exploitability Subscore: 3.9

CVSS Version 2 Metrics:

Access Vector: Locally exploitable

Access Complexity: Low

Authentication: Not required to exploit

Impact Type:Provides unauthorized access, Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service

Vendor Statements (disclaimer)

Official Statement from Red Hat (09/19/2006)

Red Hat is aware of this issue and is tracking it via the following bug for Red Hat Enterprise Linux 2.1 and 3: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=194613 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/ This issue has been fixed for Red Hat Enterprise Linux 4 in RHSA-2006:0544.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2006-0752

Hyperlink:http://www.vupen.com/english/advisories/2006/0752

External Source: BID

Name: 16850

Hyperlink:http://www.securityfocus.com/bid/16850

External Source: REDHAT

Name: RHSA-2008:0364

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0364.html

External Source: SECTRACK

Name: 1015693

Hyperlink:http://securitytracker.com/id?1015693

External Source: SECUNIA

Name: 30351

Hyperlink:http://secunia.com/advisories/30351

External Source: SECUNIA

Name: 19034

Type: Advisory

Hyperlink:http://secunia.com/advisories/19034

External Source: MISC

Name: http://rst.void.ru/papers/advisory39.txt

Hyperlink:http://rst.void.ru/papers/advisory39.txt

External Source: OVAL

Name: oval:org.mitre.oval:def:9915

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9915

External Source: XF

Name: mysql-query-log-bypass-security(24966)

Hyperlink:http://xforce.iss.net/xforce/xfdb/24966

External Source: UBUNTU

Name: USN-274-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-274-1

External Source: UBUNTU

Name: USN-274-2

Hyperlink:http://www.ubuntu.com/usn/usn-274-2

External Source: REDHAT

Name: RHSA-2007:0083

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0083.html

External Source: REDHAT

Name: RHSA-2006:0544

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0544.html

External Source: MANDRIVA

Name: MDKSA-2006:064

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:064

External Source: DEBIAN

Name: DSA-1079

Hyperlink:http://www.debian.org/security/2006/dsa-1079

External Source: DEBIAN

Name: DSA-1073

Hyperlink:http://www.debian.org/security/2006/dsa-1073

External Source: DEBIAN

Name: DSA-1071

Hyperlink:http://www.debian.org/security/2006/dsa-1071

External Source: SECUNIA

Name: 20625

Hyperlink:http://secunia.com/advisories/20625

External Source: SECUNIA

Name: 20333

Hyperlink:http://secunia.com/advisories/20333

External Source: SECUNIA

Name: 20253

Hyperlink:http://secunia.com/advisories/20253

External Source: SECUNIA

Name: 20241

Hyperlink:http://secunia.com/advisories/20241

External Source: SECUNIA

Name: 19814

Hyperlink:http://secunia.com/advisories/19814

External Source: SECUNIA

Name: 19502

Hyperlink:http://secunia.com/advisories/19502

External Source: CONFIRM

Name: http://bugs.mysql.com/bug.php?id=17667

Hyperlink:http://bugs.mysql.com/bug.php?id=17667

External Source: FULLDISC

Name: 20060225 mysql <= 5.0.18

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0653.html

References to Check Content

Identifier:oval:org.mitre.oval:def:9915

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9915

Vulnerable software and versions

Configuration 1

* cpe:/a:mysql:mysql:3.23

* cpe:/a:mysql:mysql:3.23.0:alpha

* cpe:/a:mysql:mysql:3.23.1

* cpe:/a:mysql:mysql:3.23.10

* cpe:/a:mysql:mysql:3.23.11

* cpe:/a:mysql:mysql:3.23.12

* cpe:/a:mysql:mysql:3.23.13

* cpe:/a:mysql:mysql:3.23.14

* cpe:/a:mysql:mysql:3.23.15

* cpe:/a:mysql:mysql:3.23.16

* cpe:/a:mysql:mysql:3.23.17

* cpe:/a:mysql:mysql:3.23.18

* cpe:/a:mysql:mysql:3.23.19

* cpe:/a:mysql:mysql:3.23.2

* cpe:/a:mysql:mysql:3.23.20:beta

* cpe:/a:mysql:mysql:3.23.21

* cpe:/a:mysql:mysql:3.23.22

* cpe:/a:mysql:mysql:3.23.23

* cpe:/a:mysql:mysql:3.23.24

* cpe:/a:mysql:mysql:3.23.25

* cpe:/a:mysql:mysql:3.23.26

* cpe:/a:mysql:mysql:3.23.27

* cpe:/a:mysql:mysql:3.23.28:gamma

* cpe:/a:mysql:mysql:3.23.29

* cpe:/a:mysql:mysql:3.23.3

* cpe:/a:mysql:mysql:3.23.30

* cpe:/a:mysql:mysql:3.23.31

* cpe:/a:mysql:mysql:3.23.32

* cpe:/a:mysql:mysql:3.23.33

* cpe:/a:mysql:mysql:3.23.34

* cpe:/a:mysql:mysql:3.23.35

* cpe:/a:mysql:mysql:3.23.36

* cpe:/a:mysql:mysql:3.23.37

* cpe:/a:mysql:mysql:3.23.38

* cpe:/a:mysql:mysql:3.23.39

* cpe:/a:mysql:mysql:3.23.4

* cpe:/a:mysql:mysql:3.23.40

* cpe:/a:mysql:mysql:3.23.41

* cpe:/a:mysql:mysql:3.23.42

* cpe:/a:mysql:mysql:3.23.43

* cpe:/a:mysql:mysql:3.23.44

* cpe:/a:mysql:mysql:3.23.45

* cpe:/a:mysql:mysql:3.23.46

* cpe:/a:mysql:mysql:3.23.47

* cpe:/a:mysql:mysql:3.23.48

* cpe:/a:mysql:mysql:3.23.49

* cpe:/a:mysql:mysql:3.23.5

* cpe:/a:mysql:mysql:3.23.50

* cpe:/a:mysql:mysql:3.23.51

* cpe:/a:mysql:mysql:3.23.52

* cpe:/a:mysql:mysql:3.23.53

* cpe:/a:mysql:mysql:3.23.54

* cpe:/a:mysql:mysql:3.23.55

* cpe:/a:mysql:mysql:3.23.56

* cpe:/a:mysql:mysql:3.23.57

* cpe:/a:mysql:mysql:3.23.58

* cpe:/a:mysql:mysql:3.23.59

* cpe:/a:mysql:mysql:3.23.6

* cpe:/a:mysql:mysql:3.23.7

* cpe:/a:mysql:mysql:3.23.8

* cpe:/a:mysql:mysql:3.23.9

* cpe:/a:mysql:mysql:4.0.0

* cpe:/a:mysql:mysql:4.0.1

* cpe:/a:mysql:mysql:4.0.10

* cpe:/a:mysql:mysql:4.0.11

* cpe:/a:mysql:mysql:4.0.11:gamma

* cpe:/a:mysql:mysql:4.0.12

* cpe:/a:mysql:mysql:4.0.13

* cpe:/a:mysql:mysql:4.0.14

* cpe:/a:mysql:mysql:4.0.15

* cpe:/a:mysql:mysql:4.0.16

* cpe:/a:mysql:mysql:4.0.17

* cpe:/a:mysql:mysql:4.0.18

* cpe:/a:mysql:mysql:4.0.19

* cpe:/a:mysql:mysql:4.0.2

* cpe:/a:mysql:mysql:4.0.20

* cpe:/a:mysql:mysql:4.0.21

* cpe:/a:mysql:mysql:4.0.23

* cpe:/a:mysql:mysql:4.0.24

* cpe:/a:mysql:mysql:4.0.25

* cpe:/a:mysql:mysql:4.0.26

* cpe:/a:mysql:mysql:4.0.27

* cpe:/a:mysql:mysql:4.0.3

* cpe:/a:mysql:mysql:4.0.4

* cpe:/a:mysql:mysql:4.0.5

* cpe:/a:mysql:mysql:4.0.5a

* cpe:/a:mysql:mysql:4.0.6

* cpe:/a:mysql:mysql:4.0.7

* cpe:/a:mysql:mysql:4.0.7:gamma

* cpe:/a:mysql:mysql:4.0.8

* cpe:/a:mysql:mysql:4.0.8:gamma

* cpe:/a:mysql:mysql:4.0.9

* cpe:/a:mysql:mysql:4.0.9:gamma

* cpe:/a:mysql:mysql:4.1.0.0

* cpe:/a:mysql:mysql:4.1.0:alpha

* cpe:/a:mysql:mysql:4.1.10

* cpe:/a:mysql:mysql:4.1.11

* cpe:/a:mysql:mysql:4.1.12

* cpe:/a:mysql:mysql:4.1.13

* cpe:/a:mysql:mysql:4.1.14

* cpe:/a:mysql:mysql:4.1.15

* cpe:/a:mysql:mysql:4.1.16

* cpe:/a:mysql:mysql:4.1.17

* cpe:/a:mysql:mysql:4.1.18

* cpe:/a:mysql:mysql:4.1.19

* cpe:/a:mysql:mysql:4.1.2:alpha

* cpe:/a:mysql:mysql:4.1.3

* cpe:/a:mysql:mysql:4.1.3:beta

* cpe:/a:mysql:mysql:4.1.4

* cpe:/a:mysql:mysql:4.1.5

* cpe:/a:mysql:mysql:4.1.6

* cpe:/a:mysql:mysql:4.1.7

* cpe:/a:mysql:mysql:4.1.8

* cpe:/a:mysql:mysql:4.1.9

* cpe:/a:mysql:mysql:5.0.0:alpha

* cpe:/a:mysql:mysql:5.0.1

* cpe:/a:mysql:mysql:5.0.10

* cpe:/a:mysql:mysql:5.0.11

* cpe:/a:mysql:mysql:5.0.12

* cpe:/a:mysql:mysql:5.0.13

* cpe:/a:mysql:mysql:5.0.14

* cpe:/a:mysql:mysql:5.0.15

* cpe:/a:mysql:mysql:5.0.16

* cpe:/a:mysql:mysql:5.0.17

* cpe:/a:mysql:mysql:5.0.18

* cpe:/a:mysql:mysql:5.0.2

* cpe:/a:mysql:mysql:5.0.3:beta

* cpe:/a:mysql:mysql:5.0.4

* cpe:/a:mysql:mysql:5.0.5

* cpe:/a:mysql:mysql:5.0.6

* cpe:/a:mysql:mysql:5.0.7

* cpe:/a:mysql:mysql:5.0.8

* cpe:/a:mysql:mysql:5.0.9

* Denotes Vulnerable Software

Technical Details

Vulnerability Type (View All)

CVE Standard Vulnerability Entry:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0903