CVE-2008-3963 EXPLOIT
4.0
MEDIUM · CVSS 2.0 · EPSS 6.5% (pctl 94)
Patch early
A public exploit exists.
Description
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
Scoring
| CVSS | 4.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:P |
| EPSS | 6.47% — more likely to be exploited than 94% of all CVEs |
| Weakness | CWE-134 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-09-11 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| mysql | mysql |
| oracle | mysql |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | MySQL 6.0.4 - Empty Binary String Literal Remote Denial of Service | 2008-03-28 |
References
- http://bugs.mysql.com/bug.php?id=35658
- http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-66.html
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-26.html
- http://dev.mysql.com/doc/refman/6.0/en/news-6-0-6.html
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
- http://secunia.com/advisories/31769
- http://secunia.com/advisories/32759
- http://secunia.com/advisories/32769
- http://secunia.com/advisories/34907
- http://secunia.com/advisories/36566
- http://www.debian.org/security/2009/dsa-1783
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:094
- http://www.openwall.com/lists/oss-security/2008/09/09/4
- http://www.openwall.com/lists/oss-security/2008/09/09/7
- http://www.redhat.com/support/errata/RHSA-2009-1067.html
- http://www.redhat.com/support/errata/RHSA-2009-1289.html
- http://www.securitytracker.com/id?1020858
- http://www.ubuntu.com/usn/USN-1397-1
- http://www.ubuntu.com/usn/USN-671-1
- http://www.vupen.com/english/advisories/2008/2554
→ the Explorer · watch your stack · NVD