CVE-2009-2446

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-07-13 · updated 2026-06-16
Weakness: CWE-134

Description

Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.

Affected products

Mysql: 4.1.0, 4.1.2, 4.1.3, 4.1.8, 4.1.10, 4.1.12 (+26)
MySQL Server: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 (+77)

References

http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0058.html
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
http://secunia.com/advisories/35767
http://secunia.com/advisories/36566
http://secunia.com/advisories/38517
http://securitytracker.com/id?1022533
http://support.apple.com/kb/HT4077
http://ubuntu.com/usn/usn-897-1
http://www.mandriva.com/security/advisories?name=MDVSA-2009:179
http://www.osvdb.org/55734
http://www.redhat.com/support/errata/RHSA-2009-1289.html
http://www.redhat.com/support/errata/RHSA-2010-0110.html

Get alerted when CVE-2009-2446 or the next vulnerability affects your stack