InfraGuard

MySQL 5.0 – Schwachstellen

55 bekannte CVEs betreffen die Versionslinie 5.0 von MySQL.

8.5 max. CVSSSupport beendet am 2011-12-31

Behoben in

5.0.325.0.425.0.60
Version prüfenmysql --version

CVEs, die 5.0 betreffen

CVE Titel CVSS Ausgenutzt EPSS Veröffentlicht
CVE-2009-2446 Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in... 8.5 — 2009-07-14
CVE-2017-15945 The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-clust... 7.8 — 2017-10-27
CVE-2004-0835 MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSER... 7.5 — 2004-10-16
CVE-2006-2753 SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent atta... 7.5 — 2006-06-02
CVE-2008-0226 Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remo... 7.5 — 2008-01-11
CVE-2009-5026 The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain s... 6.8 — 2012-08-17
CVE-2009-4028 The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, wh... 6.8 — 2009-12-01
CVE-2006-1518 Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attac... 6.5 — 2006-05-05
CVE-2006-4227 MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the... 6.5 — 2006-08-19
CVE-2010-1848 Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticate... 6.5 — 2010-06-08
CVE-2007-2692 The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_acc... 6.0 — 2007-05-16
CVE-2008-7247 sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the dat... 6.0 — 2009-12-01
CVE-2010-1850 Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute... 6.0 — 2010-06-08
CVE-2010-3833 MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, whic... 5.0 — 2011-01-15
CVE-2005-2573 The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 befor... 5.0 — 2005-08-16
CVE-2006-1516 The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to... 5.0 — 2006-05-05
CVE-2006-1517 sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers t... 5.0 — 2006-05-05
CVE-2007-6304 The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performi... 5.0 — 2007-12-11
CVE-2010-1621 The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges... 5.0 — 2010-05-15
CVE-2010-1849 The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remo... 5.0 — 2010-06-08
CVE-2015-2575 Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote a... 4.9 — 2015-04-17
CVE-2007-2691 MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENA... 4.9 — 2007-05-16
CVE-2005-1636 mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a p... 4.6 — 2005-05-17
CVE-2005-2558 Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 b... 4.6 — 2005-08-16
CVE-2006-0903 MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL... 4.6 — 2006-02-28
CVE-2008-2079 MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users... 4.6 — 2008-05-06
CVE-2008-4098 MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM... 4.6 — 2008-09-18
CVE-2010-3682 Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of se... 4.0 — 2011-01-12
CVE-2010-3834 Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote au... 4.0 — 2011-01-15
CVE-2010-3836 MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a... 4.0 — 2011-01-15
CVE-2010-3837 MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a... 4.0 — 2011-01-15
CVE-2010-3838 MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a... 4.0 — 2011-01-15
CVE-2012-0087 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenti... 4.0 — 2012-01-19
CVE-2012-0101 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenti... 4.0 — 2012-01-19
CVE-2012-0102 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenti... 4.0 — 2012-01-19
CVE-2012-0484 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote... 4.0 — 2012-01-19
CVE-2012-0490 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote... 4.0 — 2012-01-19
CVE-2012-1696 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authe... 4.0 — 2012-05-04
CVE-2006-3081 mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized user... 4.0 — 2006-06-20
CVE-2006-3469 Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows re... 4.0 — 2006-07-19
CVE-2007-5925 The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earli... 4.0 — 2007-11-10
CVE-2008-3963 MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quot... 4.0 — 2008-09-11
CVE-2009-0819 sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to caus... 4.0 — 2009-03-05
CVE-2009-4019 mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during executi... 4.0 — 2009-12-01
CVE-2010-3677 Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of se... 4.0 — 2011-01-12
CVE-2006-4226 MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows... 3.6 — 2006-08-19
CVE-2010-1626 MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a... 3.6 — 2010-05-22
CVE-2006-7232 sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause... 3.5 — 2008-02-27
CVE-2007-6303 MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a... 3.5 — 2007-12-11
CVE-2012-0114 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local u... 3.0 — 2012-01-19
CVE-2008-4456 Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other... 2.6 — 2008-10-07
CVE-2006-3486 Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in... 2.1 — 2006-07-11
CVE-2006-4031 MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously creat... 2.1 — 2006-08-10
CVE-2007-1420 MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing informa... 2.1 — 2007-03-13
CVE-2012-0075 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote... 1.7 — 2012-01-19

Verfolgen Sie diese Versionen auf Ihren eigenen Servern

InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.

Wöchentlicher Digest ausgenutzter Schwachstellen

Die für Self-Hosted-Server relevanten KEV-Neuzugänge, einmal pro Woche. Keine weiteren E-Mails.

Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).