CVE-2006-0903

Mysql log file obfuscation

Published Feb 27, 2006 CVSS 2.0 · 4.6 Medium EPSS 1.4% KEV · Not listed
Description
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1071-1 New MySQL 3.23 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1073-1 New MySQL 4.1 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1079-1 New MySQL 4.0 packages fix several vulnerabilities
EUVD EUVD EUVD-2006-0907 MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.
Ubuntu USN Ubuntu USN USN-274-1 MySQL vulnerability
Ubuntu USN Ubuntu USN USN-274-2 MySQL vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 4:48 PM
Reserved
Feb 27, 2006, 12:00 AM
Status
Modified
Published
Feb 27, 2006, 11:02 PM
Modified
Jun 16, 2026, 10:21 PM
Severity
Low
Public date
Feb 20, 2006, 12:00 AM