Approved changes feed: RSS · Atom

cpe:2.3:a:mysql:mysql:4.1.23:*:*:*:*:*:*:*

part: a version: 4.1.23 update: *

VendorMysql (ed5ca9e5-b35c-577b-a574-83118837ee82)
ProductMysql (1c8532fc-b850-5724-9963-04be22800b3e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mysql-8.0 purl2cpe 2026-06-01 10:17:11.766515
pkg:deb/ubuntu/mysql-8.0 purl2cpe 2026-06-01 10:17:11.766516
pkg:docker/mysql purl2cpe 2026-06-01 10:17:11.766518
pkg:github/mysql/mysql-server purl2cpe 2026-06-01 10:17:11.766519
pkg:rpm/centos/mysql-8.0 purl2cpe 2026-06-01 10:17:11.766521

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2446 vulnerable 2026-06-08 04:51:28.550750 Details available
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.
Published: 2009-07-13T17:00:00.000Z
Updated: 2024-08-07T05:52:14.762Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.