CVE-Katalog
CVE-2006-0903
Recommended update for mariadb104
- Schweregrad
- Unbekannt
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.37% · Oct 22, 2026
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query. Mysql log file obfuscation
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | mysql | 3.0 | 3.23.49-8.10 | vulnerable |
| Debian | mysql | 3.0 | 3.23.49-8.11 | vulnerable |
| Debian | mysql | 3.0 | 3.23.49-8.13 | vulnerable |
| Debian | mysql | 3.0 | 3.23.49-8.14 | vulnerable |
| Debian | mysql | 3.0 | 3.23.49-8.8 | vulnerable |
| Debian | mysql | 3.0 | 3.23.49-8.9 | vulnerable |
| Debian | mysql | 3.0 | 3.23.49-8.15 | fixed |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge1 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge2 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge3 | fixed |
| Debian | mysql-dfsg | 3.1 | 4.0.24-10 | vulnerable |
| Debian | mysql-dfsg | 3.1 | 4.0.24-10sarge1 | vulnerable |
| Debian | mysql-dfsg | 3.1 | 4.0.24-10sarge2 | fixed |
| Suse | lz4 | linux enterprise software development kit 12 sp5 | 1.8.0-3.5.2 | fixed |
| Suse | mariadb-connector-c | linux enterprise software development kit 12 sp5 | 3.1.22-2.35.1 | fixed |
| Suse | mariadb104 | linux enterprise software development kit 12 sp5 | 10.4.30-8.5.46 | fixed |
| Suse | python-mysqlclient | linux enterprise software development kit 12 sp5 | 1.3.14-8.9.2 | fixed |
| Suse | lz4 | linux enterprise server 12 sp5 | 1.8.0-3.5.2 | fixed |
| Suse | mariadb-connector-c | linux enterprise server 12 sp5 | 3.1.22-2.35.1 | fixed |
| Suse | mariadb104 | linux enterprise server 12 sp5 | 10.4.30-8.5.46 | fixed |
| Suse | python-mysqlclient | linux enterprise server 12 sp5 | 1.3.14-8.9.2 | fixed |
| Suse | lz4 | linux enterprise server for sap applications 12 sp5 | 1.8.0-3.5.2 | fixed |
| Suse | mariadb-connector-c | linux enterprise server for sap applications 12 sp5 | 3.1.22-2.35.1 | fixed |
| Suse | mariadb104 | linux enterprise server for sap applications 12 sp5 | 10.4.30-8.5.46 | fixed |
| Suse | python-mysqlclient | linux enterprise server for sap applications 12 sp5 | 1.3.14-8.9.2 | fixed |
| Opensuse | mariadb | tumbleweed | 10.6.4-2.1 | fixed |
| Suse | mariadb104 | linux enterprise high performance computing 15 sp1-ltss | 10.4.30-150100.3.5.10 | fixed |
| Suse | python-mysqlclient | linux enterprise high performance computing 15 sp1-ltss | 1.4.6-150100.3.3.7 | fixed |
| Suse | mariadb104 | linux enterprise server 15 sp1-ltss | 10.4.30-150100.3.5.10 | fixed |
| Suse | python-mysqlclient | linux enterprise server 15 sp1-ltss | 1.4.6-150100.3.3.7 | fixed |
| Suse | mariadb104 | linux enterprise server for sap applications 15 sp1 | 10.4.30-150100.3.5.10 | fixed |
| Suse | python-mysqlclient | linux enterprise server for sap applications 15 sp1 | 1.4.6-150100.3.3.7 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | mysql | deb | 3.0 | 3.23.49-8.15 | Not reported | DSA-1071-1 | Not reported |
| Debian | mysql-dfsg-4.1 | deb | 3.1 | 4.1.11a-4sarge3 | Not reported | DSA-1073-1 | Not reported |
| Debian | mysql-dfsg | deb | 3.1 | 4.0.24-10sarge2 | Not reported | DSA-1079-1 | Not reported |
| Suse | lz4 | rpm | linux enterprise software development kit 12 sp5 | 1.8.0-3.5.2 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise software development kit 12 sp5 | 3.1.22-2.35.1 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | mariadb104 | rpm | linux enterprise software development kit 12 sp5 | 10.4.30-8.5.46 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | python-mysqlclient | rpm | linux enterprise software development kit 12 sp5 | 1.3.14-8.9.2 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | lz4 | rpm | linux enterprise server 12 sp5 | 1.8.0-3.5.2 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise server 12 sp5 | 3.1.22-2.35.1 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | mariadb104 | rpm | linux enterprise server 12 sp5 | 10.4.30-8.5.46 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | python-mysqlclient | rpm | linux enterprise server 12 sp5 | 1.3.14-8.9.2 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | lz4 | rpm | linux enterprise server for sap applications 12 sp5 | 1.8.0-3.5.2 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | mariadb-connector-c | rpm | linux enterprise server for sap applications 12 sp5 | 3.1.22-2.35.1 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | mariadb104 | rpm | linux enterprise server for sap applications 12 sp5 | 10.4.30-8.5.46 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Suse | python-mysqlclient | rpm | linux enterprise server for sap applications 12 sp5 | 1.3.14-8.9.2 | Not reported | SUSE-RU-2023:4991-1 | Not reported |
| Opensuse | mariadb | rpm | tumbleweed | 10.6.4-2.1 | Not reported | OPENSUSE-SU-2024:11038-1 | Not reported |
| Suse | mariadb104 | rpm | linux enterprise high performance computing 15 sp1-ltss | 10.4.30-150100.3.5.10 | Not reported | SUSE-RU-2023:3956-1 | Not reported |
| Suse | python-mysqlclient | rpm | linux enterprise high performance computing 15 sp1-ltss | 1.4.6-150100.3.3.7 | Not reported | SUSE-RU-2023:3956-1 | Not reported |
| Suse | mariadb104 | rpm | linux enterprise server 15 sp1-ltss | 10.4.30-150100.3.5.10 | Not reported | SUSE-RU-2023:3956-1 | Not reported |
| Suse | python-mysqlclient | rpm | linux enterprise server 15 sp1-ltss | 1.4.6-150100.3.3.7 | Not reported | SUSE-RU-2023:3956-1 | Not reported |
| Suse | mariadb104 | rpm | linux enterprise server for sap applications 15 sp1 | 10.4.30-150100.3.5.10 | Not reported | SUSE-RU-2023:3956-1 | Not reported |
| Suse | python-mysqlclient | rpm | linux enterprise server for sap applications 15 sp1 | 1.4.6-150100.3.3.7 | Not reported | SUSE-RU-2023:3956-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [libmariadbd19]Unbekannt
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· x86_64 · tumbleweedUnbekannt · Behoben:
10.6.4-2.1Version impact unknown
pypi · mariadb · opensuse · tumbleweed
- [libmariadbd-devel]Unbekannt
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· x86_64 · tumbleweedUnbekannt · Behoben:
10.6.4-2.1Version impact unknown
pypi · mariadb · opensuse · tumbleweed
- [mariadb-bench]Unbekannt
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· x86_64 · tumbleweedUnbekannt · Behoben:
10.6.4-2.1Version impact unknown
pypi · mariadb · opensuse · tumbleweed
- [mariadb-client]Unbekannt
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· x86_64 · tumbleweedUnbekannt · Behoben:
10.6.4-2.1Version impact unknown
pypi · mariadb · opensuse · tumbleweed
- [mariadb-errormessages]Unbekannt
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· noarch · tumbleweedUnbekannt · Behoben:
10.6.4-2.1Version impact unknown
pypi · mariadb · opensuse · tumbleweed
- [mariadb-galera]Unbekannt
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· x86_64 · tumbleweedUnbekannt · Behoben:
10.6.4-2.1Version impact unknown
pypi · mariadb · opensuse · tumbleweed
- [mariadb-rpm-macros]Unbekannt
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· x86_64 · tumbleweedUnbekannt · Behoben:
10.6.4-2.1Version impact unknown
pypi · mariadb · opensuse · tumbleweed
- [mariadb-test]Unbekannt
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· x86_64 · tumbleweedUnbekannt · Behoben:
10.6.4-2.1Version impact unknown
pypi · mariadb · opensuse · tumbleweed
- [mariadb-tools]Unbekannt
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· x86_64 · tumbleweedUnbekannt · Behoben:
10.6.4-2.1Version impact unknown
pypi · mariadb · opensuse · tumbleweed
- [mariadb]Behoben
Quellpaket: [mariadb]
Details (1)
12.3.2-1.3· x86_64 · tumbleweedBehoben · Behoben:
10.6.4-2.1pypi · mariadb · opensuse · tumbleweed
Beobachtet:
Referenzen
- [https://access.redhat.com/errata/RHSA-2008:0364]
- [https://ftp.suse.com/pub/projects/security/]
- [https://osv.dev/vulnerability/DSA-1071-1]
- [https://osv.dev/vulnerability/DSA-1073-1]
- [https://osv.dev/vulnerability/DSA-1079-1]
- [https://osv.dev/vulnerability/SUSE-RU-2023:3956-1]
- [https://osv.dev/vulnerability/SUSE-RU-2023:4991-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11038-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]