Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2004-0837 | First vendor Publication | 2004-11-03 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 2.6 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0837 |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-10-10 | Name : SLES9: Security update for MySQL File : nvt/sles9p5015996.nasl |
| 2009-10-10 | Name : SLES9: Security update for MySQL File : nvt/sles9p5020865.nasl |
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200410-22 (MySQL) File : nvt/glsa_200410_22.nasl |
| 2008-09-04 | Name : FreeBSD Ports: mysql-server File : nvt/freebsd_mysql-server0.nasl |
| 2008-09-04 | Name : FreeBSD Ports: mysql-server File : nvt/freebsd_mysql-server1.nasl |
| 2008-09-04 | Name : FreeBSD Ports: mysql-server File : nvt/freebsd_mysql-server3.nasl |
| 2008-09-04 | Name : FreeBSD Ports: mysql-server File : nvt/freebsd_mysql-server4.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 562-1 (mysql) File : nvt/deb_562_1.nasl |
| 2005-11-03 | Name : MySQL multiple flaws (2) File : nvt/mysql_multiple_flaws2.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 10659 | MySQL ALTER MERGE Tables to Change the UNION DoS MySQL contains a flaw that may allow a remote denial of service. The issue is triggered when an attacker uses multiple threads to ALTER the same or different MERGE tables in order to change the UNION., and will result in loss of availability for the server. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-01-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-32-1.nasl - Type : ACT_GATHER_INFO |
| 2006-01-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-109-1.nasl - Type : ACT_GATHER_INFO |
| 2005-08-18 | Name : The remote host is missing Sun Security Patch number 120293-02 File : solaris10_x86_120293.nasl - Type : ACT_GATHER_INFO |
| 2005-08-18 | Name : The remote host is missing Sun Security Patch number 120292-02 File : solaris10_120292.nasl - Type : ACT_GATHER_INFO |
| 2005-07-13 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_01c231cd439311d98bb900065be4b5b6.nasl - Type : ACT_GATHER_INFO |
| 2005-07-13 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_035d17b2484a11d9813c00065be4b5b6.nasl - Type : ACT_GATHER_INFO |
| 2005-07-13 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_06a6b2cf484b11d9813c00065be4b5b6.nasl - Type : ACT_GATHER_INFO |
| 2005-07-13 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_835256b846ed11d98ce000065be4b5b6.nasl - Type : ACT_GATHER_INFO |
| 2004-12-09 | Name : The remote Fedora Core host is missing a security update. File : fedora_2004-530.nasl - Type : ACT_GATHER_INFO |
| 2004-11-10 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-562.nasl - Type : ACT_GATHER_INFO |
| 2004-11-04 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2004-611.nasl - Type : ACT_GATHER_INFO |
| 2004-11-02 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2004-119.nasl - Type : ACT_GATHER_INFO |
| 2004-10-25 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200410-22.nasl - Type : ACT_GATHER_INFO |
| 2004-10-21 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2004-569.nasl - Type : ACT_GATHER_INFO |
| 2004-10-21 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2004-597.nasl - Type : ACT_GATHER_INFO |
| 2004-10-17 | Name : The remote database server is affected by multiple vulnerabilities. File : mysql_multiple_flaws3.nasl - Type : ACT_GATHER_INFO |
| 2004-10-11 | Name : The remote database server is affected by multiple vulnerabilities. File : mysql_multiple_flaws2.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:22:54 |
|
| 2024-11-28 12:06:13 |
|
| 2024-08-02 12:02:52 |
|
| 2024-08-02 01:01:32 |
|
| 2024-02-02 01:02:37 |
|
| 2024-02-01 12:01:33 |
|
| 2023-11-07 21:48:09 |
|
| 2023-09-05 12:02:29 |
|
| 2023-09-05 01:01:24 |
|
| 2023-09-02 12:02:31 |
|
| 2023-09-02 01:01:24 |
|
| 2023-08-12 12:03:02 |
|
| 2023-08-12 01:01:25 |
|
| 2023-08-11 12:02:37 |
|
| 2023-08-11 01:01:26 |
|
| 2023-08-06 12:02:25 |
|
| 2023-08-06 01:01:25 |
|
| 2023-08-04 12:02:29 |
|
| 2023-08-04 01:01:26 |
|
| 2023-07-14 12:02:27 |
|
| 2023-07-14 01:01:26 |
|
| 2023-03-29 01:02:29 |
|
| 2023-03-28 12:01:31 |
|
| 2022-10-11 12:02:12 |
|
| 2022-10-11 01:01:18 |
|
| 2021-05-04 12:02:24 |
|
| 2021-04-22 01:02:33 |
|
| 2020-05-23 01:36:08 |
|
| 2020-05-23 00:15:53 |
|
| 2019-10-09 01:01:21 |
|
| 2019-10-08 17:19:37 |
|
| 2018-11-30 12:01:22 |
|
| 2018-09-26 21:20:06 |
|
| 2017-07-11 12:01:30 |
|
| 2016-10-18 12:01:23 |
|
| 2016-04-26 12:53:35 |
|
| 2014-02-17 10:28:02 |
|
| 2013-05-11 11:43:09 |
|
