Read the docs
TI-2006-00879 Aliases CVE-2006-0903GHSA-4qqq-9pg4-j3vh

MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries…

Priority LOW 24Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.

Why it matters now

EPSS 0.01374 72nd percentileScored 2026-11-07
Fix Fixed Red Hat: 3 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 133

CPEVersionsRoleVendor
cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableMysql
cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*4.1.3VulnerableMysql
cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*4.1.8VulnerableMysql
cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*4.1.10VulnerableMysql
cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*4.1.12VulnerableMysql
cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*4.1.13VulnerableMysql
cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*4.1.14VulnerableMysql
cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*4.1.15VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*5.0.1VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*5.0.2VulnerableMysql
  • cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:* Versions 4.1.3 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:* Versions 4.1.8 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:* Versions 4.1.10 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:* Versions 4.1.12 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:* Versions 4.1.13 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:* Versions 4.1.14 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:* Versions 4.1.15 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:* Versions 5.0.2 Vulnerable ·Mysql
Show 123 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*5.0.4VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*5.0.5VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*5.0.10VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*5.0.15VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*5.0.16VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*5.0.17VulnerableMysql
cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:*3.23VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.0:alpha:*:*:*:*:*:*3.23.0 alphaVulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.1:*:*:*:*:*:*:*3.23.1VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*3.23.2VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*3.23.3VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*3.23.4VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*3.23.5VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.6:*:*:*:*:*:*:*3.23.6VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.7:*:*:*:*:*:*:*3.23.7VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*3.23.8VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*3.23.9VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*3.23.10VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.11:*:*:*:*:*:*:*3.23.11VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.12:*:*:*:*:*:*:*3.23.12VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.13:*:*:*:*:*:*:*3.23.13VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.14:*:*:*:*:*:*:*3.23.14VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.15:*:*:*:*:*:*:*3.23.15VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.16:*:*:*:*:*:*:*3.23.16VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.17:*:*:*:*:*:*:*3.23.17VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.18:*:*:*:*:*:*:*3.23.18VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.19:*:*:*:*:*:*:*3.23.19VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.20:beta:*:*:*:*:*:*3.23.20 betaVulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.21:*:*:*:*:*:*:*3.23.21VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.22:*:*:*:*:*:*:*3.23.22VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*3.23.23VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*3.23.24VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*3.23.25VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*3.23.26VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*3.23.27VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:*3.23.28 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*3.23.29VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*3.23.30VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*3.23.31VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:*3.23.32VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.33:*:*:*:*:*:*:*3.23.33VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*3.23.34VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.35:*:*:*:*:*:*:*3.23.35VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*3.23.36VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*3.23.37VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*3.23.38VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*3.23.39VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*3.23.40VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*3.23.41VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*3.23.42VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*3.23.43VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*3.23.44VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*3.23.45VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*3.23.46VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*3.23.47VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*3.23.48VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*3.23.49VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*3.23.50VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*3.23.51VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*3.23.52VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*3.23.53VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:*3.23.54VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.55:*:*:*:*:*:*:*3.23.55VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.56:*:*:*:*:*:*:*3.23.56VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.57:*:*:*:*:*:*:*3.23.57VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.58:*:*:*:*:*:*:*3.23.58VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.59:*:*:*:*:*:*:*3.23.59VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*4.0.0VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*4.0.2VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*4.0.3VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*4.0.4VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*4.0.5VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*4.0.5aVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*4.0.6VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*4.0.7VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*4.0.7 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*4.0.8VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*4.0.8 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*4.0.9VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*4.0.9 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*4.0.10VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*4.0.11VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*4.0.11 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*4.0.12VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*4.0.13VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*4.0.14VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*4.0.15VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.16:*:*:*:*:*:*:*4.0.16VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.17:*:*:*:*:*:*:*4.0.17VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*4.0.18VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.19:*:*:*:*:*:*:*4.0.19VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*4.0.20VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*4.0.21VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*4.0.23VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*4.0.24VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.25:*:*:*:*:*:*:*4.0.25VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.26:*:*:*:*:*:*:*4.0.26VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.27:*:*:*:*:*:*:*4.0.27VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*4.1.0 alphaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*4.1.2 alphaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*4.1.3 betaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*4.1.4VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*4.1.5VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*4.1.6VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*4.1.7VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*4.1.9VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*4.1.11VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*4.1.16VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*4.1.17VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*4.1.18VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*4.1.19VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*5.0.0 alphaVulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*5.0.3 betaVulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*5.0.6VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*5.0.7VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*5.0.8VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*5.0.9VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*5.0.11VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*5.0.12VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*5.0.13VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*5.0.14VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*5.0.18VulnerableOracle
  • cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:* Versions 5.0.4 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:* Versions 5.0.5 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:* Versions 5.0.10 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:* Versions 5.0.15 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:* Versions 5.0.16 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:* Versions 5.0.17 Vulnerable ·Mysql
  • cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:* Versions 3.23 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.0:alpha:*:*:*:*:*:* Versions 3.23.0 alpha Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.1:*:*:*:*:*:*:* Versions 3.23.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:* Versions 3.23.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:* Versions 3.23.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:* Versions 3.23.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:* Versions 3.23.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.6:*:*:*:*:*:*:* Versions 3.23.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.7:*:*:*:*:*:*:* Versions 3.23.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:* Versions 3.23.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:* Versions 3.23.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:* Versions 3.23.10 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.11:*:*:*:*:*:*:* Versions 3.23.11 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.12:*:*:*:*:*:*:* Versions 3.23.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.13:*:*:*:*:*:*:* Versions 3.23.13 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.14:*:*:*:*:*:*:* Versions 3.23.14 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.15:*:*:*:*:*:*:* Versions 3.23.15 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.16:*:*:*:*:*:*:* Versions 3.23.16 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.17:*:*:*:*:*:*:* Versions 3.23.17 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.18:*:*:*:*:*:*:* Versions 3.23.18 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.19:*:*:*:*:*:*:* Versions 3.23.19 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.20:beta:*:*:*:*:*:* Versions 3.23.20 beta Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.21:*:*:*:*:*:*:* Versions 3.23.21 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.22:*:*:*:*:*:*:* Versions 3.23.22 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:* Versions 3.23.23 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:* Versions 3.23.24 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:* Versions 3.23.25 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:* Versions 3.23.26 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:* Versions 3.23.27 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:* Versions 3.23.28 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:* Versions 3.23.29 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:* Versions 3.23.30 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:* Versions 3.23.31 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:* Versions 3.23.32 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.33:*:*:*:*:*:*:* Versions 3.23.33 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:* Versions 3.23.34 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.35:*:*:*:*:*:*:* Versions 3.23.35 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:* Versions 3.23.36 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:* Versions 3.23.37 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:* Versions 3.23.38 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:* Versions 3.23.39 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:* Versions 3.23.40 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:* Versions 3.23.41 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:* Versions 3.23.42 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:* Versions 3.23.43 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:* Versions 3.23.44 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:* Versions 3.23.45 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:* Versions 3.23.46 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:* Versions 3.23.47 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:* Versions 3.23.48 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:* Versions 3.23.49 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:* Versions 3.23.50 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:* Versions 3.23.51 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:* Versions 3.23.52 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:* Versions 3.23.53 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:* Versions 3.23.54 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.55:*:*:*:*:*:*:* Versions 3.23.55 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.56:*:*:*:*:*:*:* Versions 3.23.56 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.57:*:*:*:*:*:*:* Versions 3.23.57 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.58:*:*:*:*:*:*:* Versions 3.23.58 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.59:*:*:*:*:*:*:* Versions 3.23.59 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:* Versions 4.0.5a Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:* Versions 4.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:* Versions 4.0.7 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:* Versions 4.0.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:* Versions 4.0.8 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:* Versions 4.0.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:* Versions 4.0.9 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:* Versions 4.0.10 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:* Versions 4.0.11 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:* Versions 4.0.11 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:* Versions 4.0.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:* Versions 4.0.13 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:* Versions 4.0.14 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:* Versions 4.0.15 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.16:*:*:*:*:*:*:* Versions 4.0.16 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.17:*:*:*:*:*:*:* Versions 4.0.17 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:* Versions 4.0.18 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.19:*:*:*:*:*:*:* Versions 4.0.19 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:* Versions 4.0.20 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:* Versions 4.0.21 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:* Versions 4.0.23 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:* Versions 4.0.24 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.25:*:*:*:*:*:*:* Versions 4.0.25 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.26:*:*:*:*:*:*:* Versions 4.0.26 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.27:*:*:*:*:*:*:* Versions 4.0.27 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:* Versions 4.1.0 alpha Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:* Versions 4.1.2 alpha Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:* Versions 4.1.3 beta Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:* Versions 4.1.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:* Versions 4.1.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:* Versions 4.1.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:* Versions 4.1.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:* Versions 4.1.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:* Versions 4.1.11 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:* Versions 4.1.16 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:* Versions 4.1.17 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:* Versions 4.1.18 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:* Versions 4.1.19 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:* Versions 5.0.0 alpha Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:* Versions 5.0.3 beta Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:* Versions 5.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:* Versions 5.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:* Versions 5.0.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:* Versions 5.0.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:* Versions 5.0.11 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:* Versions 5.0.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:* Versions 5.0.13 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:* Versions 5.0.14 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:* Versions 5.0.18 Vulnerable ·Oracle

Remediation

Red Hat 3 advisories

  • RHSA-2008:0364 Released 2008-05-20 · Red Hat rating Low
    mysql security and bug fix update
    • Red Hat Enterprise Linux (v. 5 server) mysql-5.0.45-7.el5, mysql-5.0.45-7.el5.i386, mysql-5.0.45-7.el5.ia64 +17
    • Red Hat Enterprise Linux Desktop (v. 5 client) mysql-5.0.45-7.el5, mysql-5.0.45-7.el5.i386
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mysql-5.0.45-7.el5, mysql-bench-5.0.45-7.el5, mysql-bench-5.0.45-7.el5.i386 +6
  • RHSA-2007:0083 Released 2007-02-19 · Red Hat rating Low
    mysql security update
    • Red Hat Application Stack v1 for Enterprise Linux AS (v.4) mysql-5.0.30-1.el4s1.1, mysql-5.0.30-1.el4s1.1.i386, mysql-bench-5.0.30-1.el4s1.1 +7
    • Red Hat Application Stack v1 for Enterprise Linux ES (v.4) mysql-5.0.30-1.el4s1.1, mysql-5.0.30-1.el4s1.1.i386, mysql-bench-5.0.30-1.el4s1.1 +7
  • RHSA-2006:0544 Released 2006-06-09 · Red Hat rating Important
    mysql security update
    • Red Hat Enterprise Linux AS version 4 mysql-4.1.20-1.RHEL4.1, mysql-4.1.20-1.RHEL4.1.i386, mysql-4.1.20-1.RHEL4.1.ia64 +13
    • Red Hat Enterprise Linux Desktop version 4 mysql-4.1.20-1.RHEL4.1, mysql-4.1.20-1.RHEL4.1.i386, mysql-bench-4.1.20-1.RHEL4.1 +5
    • Red Hat Enterprise Linux ES version 4 mysql-4.1.20-1.RHEL4.1, mysql-4.1.20-1.RHEL4.1.i386, mysql-4.1.20-1.RHEL4.1.ia64 +9
    • Red Hat Enterprise Linux WS version 4 mysql-4.1.20-1.RHEL4.1, mysql-4.1.20-1.RHEL4.1.i386, mysql-4.1.20-1.RHEL4.1.ia64 +9

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Application Stack v1 for Enterprise Linux AS (v.4)Fixed RHSA-2007:0083
Red Hat Application Stack v1 for Enterprise Linux ES (v.4)Fixed RHSA-2007:0083
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2008:0364
Red Hat Enterprise Linux AS version 4Fixed RHSA-2006:0544
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2008:0364
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2008:0364
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2006:0544
Red Hat Enterprise Linux ES version 4Fixed RHSA-2006:0544
Red Hat Enterprise Linux WS version 4Fixed RHSA-2006:0544

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-0903
  2. 2026-10-03 Alias added: GHSA-4qqq-9pg4-j3vh

References

Advisory 9

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences