CVE-2006-3081

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

Affected Software

Name	Vendor	Start Version	End Version
Mysql	Mysql	4.1.13 (including)	4.1.13 (including)
Mysql	Mysql	4.1.15 (including)	4.1.15 (including)
Mysql	Mysql	5.0.0 (including)	5.0.0 (including)
Mysql	Mysql	5.0.1 (including)	5.0.1 (including)
Mysql	Mysql	5.0.2 (including)	5.0.2 (including)
Mysql	Mysql	5.0.3 (including)	5.0.3 (including)
Mysql	Mysql	5.0.4 (including)	5.0.4 (including)
Mysql	Mysql	5.1.5 (including)	5.1.5 (including)
Mysql	Oracle	4.0.18 (including)	4.0.18 (including)
Mysql	Oracle	4.1.4 (including)	4.1.4 (including)
Mysql	Oracle	4.1.5 (including)	4.1.5 (including)
Mysql	Oracle	4.1.7 (including)	4.1.7 (including)
Mysql	Oracle	4.1.16 (including)	4.1.16 (including)
Mysql	Oracle	5.0.18 (including)	5.0.18 (including)
Red Hat Enterprise Linux 4	RedHat	mysql-0:4.1.20-1.RHEL4.1	*
Red Hat Web Application Stack for RHEL 4	RedHat	mysql-0:5.0.30-1.el4s1.1	*
Mysql-dfsg-5.0	Ubuntu	dapper	*
Mysql-dfsg-5.0	Ubuntu	devel	*
Mysql-dfsg-5.0	Ubuntu	edgy	*
Mysql-dfsg-5.0	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3081
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References