CVE-2006-0903
Fixed in a distro release EPSS 1%
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.
Products: mysql, oracle mysql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | mysql | 3.23.49-8.15 |
| Debian 3.1 | mysql-dfsg | 4.0.24-10sarge2 |
| Debian 3.1 | mysql-dfsg-4.1 | 4.1.11a-4sarge3 |
| Red Hat Enterprise Linux 4 | mysql | 0:4.1.20-1.RHEL4.1 |
| Red Hat Enterprise Linux 4 | mysql-bench | 0:4.1.20-1.RHEL4.1 |
| Red Hat Enterprise Linux 4 | mysql-debuginfo | 0:4.1.20-1.RHEL4.1 |
| Red Hat Enterprise Linux 4 | mysql-devel | 0:4.1.20-1.RHEL4.1 |
| Red Hat Enterprise Linux 4 | mysql-server | 0:4.1.20-1.RHEL4.1 |
| Red Hat Enterprise Linux 5 | mysql | 0:5.0.45-7.el5 |
| Red Hat Enterprise Linux 5 | mysql-bench | 0:5.0.45-7.el5 |
| Red Hat Enterprise Linux 5 | mysql-debuginfo | 0:5.0.45-7.el5 |
| Red Hat Enterprise Linux 5 | mysql-devel | 0:5.0.45-7.el5 |
| Red Hat Enterprise Linux 5 | mysql-server | 0:5.0.45-7.el5 |
| Red Hat Enterprise Linux 5 | mysql-test | 0:5.0.45-7.el5 |
| Red Hat rhel application stack 1 | mysql | 0:5.0.30-1.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-bench | 0:5.0.30-1.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-debuginfo | 0:5.0.30-1.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-devel | 0:5.0.30-1.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-server | 0:5.0.30-1.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-test | 0:5.0.30-1.el4s1.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| openSUSE Tumbleweed | mariadb | 10.6.4-2.1 |