Vulnerability Details CVE-2006-0903
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.6%
CVSS Severity
CVSS v2 Score 4.6
Products affected by CVE-2006-0903
-
cpe:2.3:a:mysql:mysql:4.1.0
-
cpe:2.3:a:mysql:mysql:4.1.10
-
cpe:2.3:a:mysql:mysql:4.1.12
-
cpe:2.3:a:mysql:mysql:4.1.13
-
cpe:2.3:a:mysql:mysql:4.1.14
-
cpe:2.3:a:mysql:mysql:4.1.15
-
cpe:2.3:a:mysql:mysql:4.1.3
-
cpe:2.3:a:mysql:mysql:4.1.8
-
cpe:2.3:a:mysql:mysql:5.0.1
-
cpe:2.3:a:mysql:mysql:5.0.10
-
cpe:2.3:a:mysql:mysql:5.0.15
-
cpe:2.3:a:mysql:mysql:5.0.16
-
cpe:2.3:a:mysql:mysql:5.0.17
-
cpe:2.3:a:mysql:mysql:5.0.2
-
cpe:2.3:a:mysql:mysql:5.0.4
-
cpe:2.3:a:mysql:mysql:5.0.5
-
cpe:2.3:a:oracle:mysql:3.23
-
cpe:2.3:a:oracle:mysql:3.23.0
-
cpe:2.3:a:oracle:mysql:3.23.1
-
cpe:2.3:a:oracle:mysql:3.23.10
-
cpe:2.3:a:oracle:mysql:3.23.11
-
cpe:2.3:a:oracle:mysql:3.23.12
-
cpe:2.3:a:oracle:mysql:3.23.13
-
cpe:2.3:a:oracle:mysql:3.23.14
-
cpe:2.3:a:oracle:mysql:3.23.15
-
cpe:2.3:a:oracle:mysql:3.23.16
-
cpe:2.3:a:oracle:mysql:3.23.17
-
cpe:2.3:a:oracle:mysql:3.23.18
-
cpe:2.3:a:oracle:mysql:3.23.19
-
cpe:2.3:a:oracle:mysql:3.23.2
-
cpe:2.3:a:oracle:mysql:3.23.20
-
cpe:2.3:a:oracle:mysql:3.23.21
-
cpe:2.3:a:oracle:mysql:3.23.22
-
cpe:2.3:a:oracle:mysql:3.23.23
-
cpe:2.3:a:oracle:mysql:3.23.24
-
cpe:2.3:a:oracle:mysql:3.23.25
-
cpe:2.3:a:oracle:mysql:3.23.26
-
cpe:2.3:a:oracle:mysql:3.23.27
-
cpe:2.3:a:oracle:mysql:3.23.28
-
cpe:2.3:a:oracle:mysql:3.23.29
-
cpe:2.3:a:oracle:mysql:3.23.3
-
cpe:2.3:a:oracle:mysql:3.23.30
-
cpe:2.3:a:oracle:mysql:3.23.31
-
cpe:2.3:a:oracle:mysql:3.23.32
-
cpe:2.3:a:oracle:mysql:3.23.33
-
cpe:2.3:a:oracle:mysql:3.23.34
-
cpe:2.3:a:oracle:mysql:3.23.35
-
cpe:2.3:a:oracle:mysql:3.23.36
-
cpe:2.3:a:oracle:mysql:3.23.37
-
cpe:2.3:a:oracle:mysql:3.23.38
-
cpe:2.3:a:oracle:mysql:3.23.39
-
cpe:2.3:a:oracle:mysql:3.23.4
-
cpe:2.3:a:oracle:mysql:3.23.40
-
cpe:2.3:a:oracle:mysql:3.23.41
-
cpe:2.3:a:oracle:mysql:3.23.42
-
cpe:2.3:a:oracle:mysql:3.23.43
-
cpe:2.3:a:oracle:mysql:3.23.44
-
cpe:2.3:a:oracle:mysql:3.23.45
-
cpe:2.3:a:oracle:mysql:3.23.46
-
cpe:2.3:a:oracle:mysql:3.23.47
-
cpe:2.3:a:oracle:mysql:3.23.48
-
cpe:2.3:a:oracle:mysql:3.23.49
-
cpe:2.3:a:oracle:mysql:3.23.5
-
cpe:2.3:a:oracle:mysql:3.23.50
-
cpe:2.3:a:oracle:mysql:3.23.51
-
cpe:2.3:a:oracle:mysql:3.23.52
-
cpe:2.3:a:oracle:mysql:3.23.53
-
cpe:2.3:a:oracle:mysql:3.23.54
-
cpe:2.3:a:oracle:mysql:3.23.55
-
cpe:2.3:a:oracle:mysql:3.23.56
-
cpe:2.3:a:oracle:mysql:3.23.57
-
cpe:2.3:a:oracle:mysql:3.23.58
-
cpe:2.3:a:oracle:mysql:3.23.59
-
cpe:2.3:a:oracle:mysql:3.23.6
-
cpe:2.3:a:oracle:mysql:3.23.7
-
cpe:2.3:a:oracle:mysql:3.23.8
-
cpe:2.3:a:oracle:mysql:3.23.9
-
cpe:2.3:a:oracle:mysql:4.0.0
-
cpe:2.3:a:oracle:mysql:4.0.1
-
cpe:2.3:a:oracle:mysql:4.0.10
-
cpe:2.3:a:oracle:mysql:4.0.11
-
cpe:2.3:a:oracle:mysql:4.0.12
-
cpe:2.3:a:oracle:mysql:4.0.13
-
cpe:2.3:a:oracle:mysql:4.0.14
-
cpe:2.3:a:oracle:mysql:4.0.15
-
cpe:2.3:a:oracle:mysql:4.0.16
-
cpe:2.3:a:oracle:mysql:4.0.17
-
cpe:2.3:a:oracle:mysql:4.0.18
-
cpe:2.3:a:oracle:mysql:4.0.19
-
cpe:2.3:a:oracle:mysql:4.0.2
-
cpe:2.3:a:oracle:mysql:4.0.20
-
cpe:2.3:a:oracle:mysql:4.0.21
-
cpe:2.3:a:oracle:mysql:4.0.23
-
cpe:2.3:a:oracle:mysql:4.0.24
-
cpe:2.3:a:oracle:mysql:4.0.25
-
cpe:2.3:a:oracle:mysql:4.0.26
-
cpe:2.3:a:oracle:mysql:4.0.27
-
cpe:2.3:a:oracle:mysql:4.0.3
-
cpe:2.3:a:oracle:mysql:4.0.4
-
cpe:2.3:a:oracle:mysql:4.0.5
-
cpe:2.3:a:oracle:mysql:4.0.5a
-
cpe:2.3:a:oracle:mysql:4.0.6
-
cpe:2.3:a:oracle:mysql:4.0.7
-
cpe:2.3:a:oracle:mysql:4.0.8
-
cpe:2.3:a:oracle:mysql:4.0.9
-
cpe:2.3:a:oracle:mysql:4.1.0
-
cpe:2.3:a:oracle:mysql:4.1.11
-
cpe:2.3:a:oracle:mysql:4.1.16
-
cpe:2.3:a:oracle:mysql:4.1.17
-
cpe:2.3:a:oracle:mysql:4.1.18
-
cpe:2.3:a:oracle:mysql:4.1.19
-
cpe:2.3:a:oracle:mysql:4.1.2
-
cpe:2.3:a:oracle:mysql:4.1.3
-
cpe:2.3:a:oracle:mysql:4.1.4
-
cpe:2.3:a:oracle:mysql:4.1.5
-
cpe:2.3:a:oracle:mysql:4.1.6
-
cpe:2.3:a:oracle:mysql:4.1.7
-
cpe:2.3:a:oracle:mysql:4.1.9
-
cpe:2.3:a:oracle:mysql:5.0.0
-
cpe:2.3:a:oracle:mysql:5.0.11
-
cpe:2.3:a:oracle:mysql:5.0.12
-
cpe:2.3:a:oracle:mysql:5.0.13
-
cpe:2.3:a:oracle:mysql:5.0.14
-
cpe:2.3:a:oracle:mysql:5.0.18
-
cpe:2.3:a:oracle:mysql:5.0.3
-
cpe:2.3:a:oracle:mysql:5.0.6
-
cpe:2.3:a:oracle:mysql:5.0.7
-
cpe:2.3:a:oracle:mysql:5.0.8
-
cpe:2.3:a:oracle:mysql:5.0.9