CVE-2009-2446 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-2446 Interim 1 14 2023-12-09T02:03:27Z current 2021-05-30T12:47:42Z 2023-12-09T02:03:27Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-2446 Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VDHSIVGQYGW3CBIOMJ35OP3MSZVABWVX/#VDHSIVGQYGW3CBIOMJ35OP3MSZVABWVX E-Mail link for SUSE-SR:2009:014 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SUSE Linux Enterprise Software Development Kit 11 SP4 libmysql55client18-32bit-5.5.43-0.7.3 libmysql55client18-5.5.43-0.7.3 libmysql55client18-x86-5.5.43-0.7.3 libmysql55client_r18-32bit-5.5.43-0.7.3 libmysql55client_r18-5.5.43-0.7.3 libmysql55client_r18-x86-5.5.43-0.7.3 libmysqlclient-devel-5.0.96-0.6.1 libmysqlclient15-32bit-5.0.67-13.16.1 libmysqlclient15-32bit-5.0.67-13.20.1 libmysqlclient15-32bit-5.0.94-0.2.4.1 libmysqlclient15-32bit-5.0.96-0.6.1 libmysqlclient15-32bit-5.0.96-0.6.20 libmysqlclient15-5.0.67-13.16.1 libmysqlclient15-5.0.67-13.20.1 libmysqlclient15-5.0.94-0.2.4.1 libmysqlclient15-5.0.96-0.6.1 libmysqlclient15-5.0.96-0.6.20 libmysqlclient15-x86-5.0.67-13.20.1 libmysqlclient15-x86-5.0.67-13.26.1 libmysqlclient15-x86-5.0.94-0.2.4.1 libmysqlclient15-x86-5.0.96-0.6.1 libmysqlclient15-x86-5.0.96-0.6.20 libmysqlclient_r15-32bit-5.0.96-0.6.20 libmysqlclient_r15-5.0.67-13.16.1 libmysqlclient_r15-5.0.67-13.20.1 libmysqlclient_r15-5.0.94-0.2.4.1 libmysqlclient_r15-5.0.96-0.6.1 libmysqlclient_r15-5.0.96-0.6.20 libmysqlclient_r15-x86-5.0.96-0.6.20 mysql-5.0.67-13.16.1 mysql-5.0.67-13.20.1 mysql-5.0.94-0.2.4.1 mysql-5.5.31-0.7.10 mysql-5.5.43-0.7.3 mysql-Max-5.0.67-13.16.1 mysql-Max-5.0.67-13.20.1 mysql-Max-5.0.94-0.2.4.1 mysql-client-5.0.67-13.16.1 mysql-client-5.0.67-13.20.1 mysql-client-5.0.94-0.2.4.1 mysql-client-5.5.31-0.7.10 mysql-client-5.5.43-0.7.3 mysql-tools-5.0.94-0.2.4.1 mysql-tools-5.5.31-0.7.10 mysql-tools-5.5.43-0.7.3 libmysqlclient15-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server 11 libmysqlclient15-32bit-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server 11 libmysqlclient15-x86-5.0.67-13.26.1 as a component of SUSE Linux Enterprise Server 11 libmysqlclient_r15-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server 11 mysql-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server 11 mysql-Max-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server 11 mysql-client-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server 11 libmysqlclient15-5.0.67-13.20.1 as a component of SUSE Linux Enterprise Server 11 SP1 libmysqlclient15-32bit-5.0.67-13.20.1 as a component of SUSE Linux Enterprise Server 11 SP1 libmysqlclient15-x86-5.0.67-13.20.1 as a component of SUSE Linux Enterprise Server 11 SP1 libmysqlclient_r15-5.0.67-13.20.1 as a component of SUSE Linux Enterprise Server 11 SP1 mysql-5.0.67-13.20.1 as a component of SUSE Linux Enterprise Server 11 SP1 mysql-Max-5.0.67-13.20.1 as a component of SUSE Linux Enterprise Server 11 SP1 mysql-client-5.0.67-13.20.1 as a component of SUSE Linux Enterprise Server 11 SP1 libmysqlclient15-5.0.94-0.2.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient15-32bit-5.0.94-0.2.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient15-x86-5.0.94-0.2.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient_r15-5.0.94-0.2.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-5.0.94-0.2.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-Max-5.0.94-0.2.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-client-5.0.94-0.2.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-tools-5.0.94-0.2.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 libmysqlclient15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 libmysqlclient15-x86-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 mysql-5.5.31-0.7.10 as a component of SUSE Linux Enterprise Server 11 SP3 mysql-client-5.5.31-0.7.10 as a component of SUSE Linux Enterprise Server 11 SP3 mysql-tools-5.5.31-0.7.10 as a component of SUSE Linux Enterprise Server 11 SP3 libmysql55client18-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-32bit-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-x86-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-32bit-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-x86-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysqlclient15-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Server 11 SP4 libmysqlclient15-32bit-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Server 11 SP4 libmysqlclient15-x86-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Server 11 SP4 libmysqlclient_r15-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-client-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-tools-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Server 11 SP4 libmysqlclient15-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libmysqlclient15-32bit-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libmysqlclient15-x86-5.0.67-13.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libmysqlclient_r15-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mysql-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mysql-Max-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mysql-client-5.0.67-13.16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libmysql55client_r18-32bit-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysql55client_r18-x86-5.5.43-0.7.3 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysqlclient-devel-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysqlclient_r15-32bit-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysqlclient_r15-x86-5.0.96-0.6.20 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information. CVE-2009-2446 SUSE Linux Enterprise Server 11:libmysqlclient15-5.0.67-13.16.1 SUSE Linux Enterprise Server 11:libmysqlclient15-32bit-5.0.67-13.16.1 SUSE Linux Enterprise Server 11:libmysqlclient15-x86-5.0.67-13.26.1 SUSE Linux Enterprise Server 11:libmysqlclient_r15-5.0.67-13.16.1 SUSE Linux Enterprise Server 11:mysql-5.0.67-13.16.1 SUSE Linux Enterprise Server 11:mysql-Max-5.0.67-13.16.1 SUSE Linux Enterprise Server 11:mysql-client-5.0.67-13.16.1 SUSE Linux Enterprise Server 11 SP1:libmysqlclient15-5.0.67-13.20.1 SUSE Linux Enterprise Server 11 SP1:libmysqlclient15-32bit-5.0.67-13.20.1 SUSE Linux Enterprise Server 11 SP1:libmysqlclient15-x86-5.0.67-13.20.1 SUSE Linux Enterprise Server 11 SP1:libmysqlclient_r15-5.0.67-13.20.1 SUSE Linux Enterprise Server 11 SP1:mysql-5.0.67-13.20.1 SUSE Linux Enterprise Server 11 SP1:mysql-Max-5.0.67-13.20.1 SUSE Linux Enterprise Server 11 SP1:mysql-client-5.0.67-13.20.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-5.0.94-0.2.4.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-32bit-5.0.94-0.2.4.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-x86-5.0.94-0.2.4.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient_r15-5.0.94-0.2.4.1 SUSE Linux Enterprise Server 11 SP2:mysql-5.0.94-0.2.4.1 SUSE Linux Enterprise Server 11 SP2:mysql-Max-5.0.94-0.2.4.1 SUSE Linux Enterprise Server 11 SP2:mysql-client-5.0.94-0.2.4.1 SUSE Linux Enterprise Server 11 SP2:mysql-tools-5.0.94-0.2.4.1 SUSE Linux Enterprise Server 11 SP3:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP3:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP3:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP3:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP3:mysql-5.5.31-0.7.10 SUSE Linux Enterprise Server 11 SP3:mysql-client-5.5.31-0.7.10 SUSE Linux Enterprise Server 11 SP3:mysql-tools-5.5.31-0.7.10 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.6.20 SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.6.20 SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-x86-5.0.96-0.6.20 SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.6.20 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.43-0.7.3 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.43-0.7.3 SUSE Linux Enterprise Server for SAP Applications 11:libmysqlclient15-5.0.67-13.16.1 SUSE Linux Enterprise Server for SAP Applications 11:libmysqlclient15-32bit-5.0.67-13.16.1 SUSE Linux Enterprise Server for SAP Applications 11:libmysqlclient15-x86-5.0.67-13.26.1 SUSE Linux Enterprise Server for SAP Applications 11:libmysqlclient_r15-5.0.67-13.16.1 SUSE Linux Enterprise Server for SAP Applications 11:mysql-5.0.67-13.16.1 SUSE Linux Enterprise Server for SAP Applications 11:mysql-Max-5.0.67-13.16.1 SUSE Linux Enterprise Server for SAP Applications 11:mysql-client-5.0.67-13.16.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.43-0.7.3 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.43-0.7.3 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.6.20 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-x86-5.0.96-0.6.20 important 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C