CVE-2004-0956

Description

MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.

Affected products

• oracle / mysql4.0.0 – 4.0.0
• oracle / mysql4.0.1 – 4.0.1
• oracle / mysql4.0.2 – 4.0.2
• oracle / mysql4.0.3 – 4.0.3
• oracle / mysql4.0.4 – 4.0.4
• oracle / mysql4.0.5 – 4.0.5
• oracle / mysql4.0.5a – 4.0.5a
• oracle / mysql4.0.6 – 4.0.6
• oracle / mysql4.0.7 – 4.0.7
• oracle / mysql4.0.7 – 4.0.7
• oracle / mysql4.0.8 – 4.0.8
• oracle / mysql4.0.8 – 4.0.8
• oracle / mysql4.0.9 – 4.0.9
• oracle / mysql4.0.9 – 4.0.9
• oracle / mysql4.0.10 – 4.0.10
• oracle / mysql4.0.11 – 4.0.11
• oracle / mysql4.0.11 – 4.0.11
• oracle / mysql4.0.12 – 4.0.12
• oracle / mysql4.0.13 – 4.0.13
• oracle / mysql4.0.14 – 4.0.14
• oracle / mysql4.0.15 – 4.0.15
• oracle / mysql4.0.18 – 4.0.18
• oracle / mysql4.0.20 – 4.0.20
• SUSE / suse_linux8.0 – 8.0
• SUSE / suse_linux8.1 – 8.1
• SUSE / suse_linux8.2 – 8.2
• SUSE / suse_linux9.0 – 9.0
• SUSE / suse_linux9.0 – 9.0
• SUSE / suse_linux9.1 – 9.1
• SUSE / suse_linux9.2 – 9.2
• Ubuntu / ubuntu_linux4.1 – 4.1
• Ubuntu / ubuntu_linux4.1 – 4.1

References

• MISChttp://www.trustix.net/errata/2004/0054/
• MAILING_LISThttp://lists.mysql.com/packagers/202
• MISChttp://www.gentoo.org/security/en/glsa/glsa-200410-22.xml
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/17768
• VENDOR_ADVISORYhttp://www.novell.com/linux/security/advisories/2004_01_sr.html
• MISChttp://bugs.mysql.com/bug.php?id=3870