CVE-2007-3780

MEDIUM 5.0CVE-2007-3780 · Published 15/07/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
community server mysql	`≤ 5.0.41`	No fix yet

Description

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.

References

bugs.mysql.com/bug.php
dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html
dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html · Patch
lists.mysql.com/announce/470
osvdb.org/36732
secunia.com/advisories/25301
secunia.com/advisories/26073
secunia.com/advisories/26430
secunia.com/advisories/26498
secunia.com/advisories/26621
secunia.com/advisories/26710
secunia.com/advisories/26987
secunia.com/advisories/27155
secunia.com/advisories/27823
security.gentoo.org/glsa/glsa-200708-10.xml
debian.org/security/2007/dsa-1413
mandriva.com/security/advisories
novell.com/linux/security/advisories/2007_19_sr.html
redhat.com/support/errata/RHSA-2007-0875.html
redhat.com/support/errata/RHSA-2007-0894.html
securityfocus.com/archive/1/473874/100/0/threaded
securityfocus.com/bid/25017
securitytracker.com/id
vupen.com/english/advisories/2008/1000/references
issues.rpath.com/browse/RPL-1536
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058
usn.ubuntu.com/528-1

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free