CVE-2006-3469
MySQL Server 4.1 < 4.1.21 and 5.0 < 1 April 2006 - Authenticated Denial of Service via date_format Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-3469. PoCs published by Christian Hammers.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in MySQL by executing a malformed SQL statement that crashes the server. It requires valid credentials to execute arbitrary SQL statements.
Description
Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.
Exploits (1)
This exploit demonstrates a denial-of-service vulnerability in MySQL by executing a malformed SQL statement that crashes the server. It requires valid credentials to execute arbitrary SQL statements.