CVE catalog
CVE-2006-3469
mysql-dfsg-4.1 - several vulnerabilities
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 31.06% · Oct 25, 2026
Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message. mysql server DoS This issue did not affect mysql packages as shipped with Red Hat Enterprise Linux 2.1, 3, or 5, and Red Hat Application Stack v1 and v2.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge1 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge2 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge3 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge4 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge5 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | mysql-dfsg-4.1 | deb | 3.1 | 4.1.11a-4sarge5 | Not reported | DSA-1112 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: