CVE-2004-0956
MySQL - Denial of Service via Malformed MATCH AGAINST Query
Title source: llmDescription
MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.
References (6)
Core 6
Core References
Various Sources vendor-advisory
x_refsource_trustix
http://www.trustix.net/errata/2004/0054/
Various Sources x_refsource_confirm
http://lists.mysql.com/packagers/202
Patch, Vendor Advisory vendor-advisory
x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17768
Vendor Advisory vendor-advisory
x_refsource_suse
http://www.novell.com/linux/security/advisories/2004_01_sr.html
Various Sources x_refsource_confirm
http://bugs.mysql.com/bug.php?id=3870
Scores
EPSS
0.0105
EPSS Percentile
77.7%
Details
Status
published
Products (26)
oracle/mysql
4.0.0
oracle/mysql
4.0.1
oracle/mysql
4.0.2
oracle/mysql
4.0.3
oracle/mysql
4.0.4
oracle/mysql
4.0.5
oracle/mysql
4.0.5a
oracle/mysql
4.0.6
oracle/mysql
4.0.7 (2 CPE variants)
oracle/mysql
4.0.8 (2 CPE variants)
... and 16 more
Published
Jan 10, 2005
Tracked Since
Feb 18, 2026