InfraGuard

MySQL 4.1 – Schwachstellen

35 bekannte CVEs betreffen die Versionslinie 4.1 von MySQL.

10.0 max. CVSSSupport beendet am 2009-12-31

Behoben in

4.1.24
Version prüfenmysql --version

CVEs, die 4.1 betreffen

CVE Titel CVSS Ausgenutzt EPSS Veröffentlicht
CVE-2004-0627 The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authen... 10.0 — 2004-07-08
CVE-2004-0628 Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of... 10.0 — 2004-07-08
CVE-2003-0780 Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows att... 9.0 — 2003-09-12
CVE-2009-2446 Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in... 8.5 — 2009-07-14
CVE-2017-15945 The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-clust... 7.8 — 2017-10-27
CVE-2004-0835 MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSER... 7.5 — 2004-10-16
CVE-2006-2753 SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent atta... 7.5 — 2006-06-02
CVE-2009-4028 The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, wh... 6.8 — 2009-12-01
CVE-2005-2573 The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 befor... 5.0 — 2005-08-16
CVE-2006-1516 The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to... 5.0 — 2006-05-05
CVE-2006-1517 sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers t... 5.0 — 2006-05-05
CVE-2010-1621 The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges... 5.0 — 2010-05-15
CVE-2015-2575 Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote a... 4.9 — 2015-04-17
CVE-2007-2691 MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENA... 4.9 — 2007-05-16
CVE-2005-0709 MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE pri... 4.6 — 2005-03-11
CVE-2005-0710 MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE pri... 4.6 — 2005-03-11
CVE-2005-2558 Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 b... 4.6 — 2005-08-16
CVE-2006-0903 MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL... 4.6 — 2006-02-28
CVE-2008-2079 MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users... 4.6 — 2008-05-06
CVE-2003-1480 MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to de... 4.3 — 2007-10-25
CVE-2010-3682 Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of se... 4.0 — 2011-01-12
CVE-2012-1696 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authe... 4.0 — 2012-05-04
CVE-2006-3081 mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized user... 4.0 — 2006-06-20
CVE-2006-3469 Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows re... 4.0 — 2006-07-19
CVE-2007-5925 The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earli... 4.0 — 2007-11-10
CVE-2009-0819 sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to caus... 4.0 — 2009-03-05
CVE-2010-3677 Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of se... 4.0 — 2011-01-12
CVE-2006-4226 MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows... 3.6 — 2006-08-19
CVE-2010-1626 MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a... 3.6 — 2010-05-22
CVE-2004-0837 MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang)... 2.6 — 2004-10-16
CVE-2004-0381 mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bug... 2.1 — 2004-04-06
CVE-2005-0711 MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables,... 2.1 — 2005-03-11
CVE-2006-4031 MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously creat... 2.1 — 2006-08-10
CVE-2006-4380 MySQL before 4.1.13 allows local users to cause a denial of service (persistent replication slave crash) via a... 2.1 — 2006-08-29
CVE-2007-1420 MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing informa... 2.1 — 2007-03-13

Verfolgen Sie diese Versionen auf Ihren eigenen Servern

InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.

Wöchentlicher Digest ausgenutzter Schwachstellen

Die für Self-Hosted-Server relevanten KEV-Neuzugänge, einmal pro Woche. Keine weiteren E-Mails.

Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).