CVE-2006-3469: MySQL

Medium severity, CVSS 4.0. EPSS: 29% chance of exploitation in the next 30 days.

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.

Affected products

• MySQL MySQL: version 4.1.8 only; version 4.1.12 only; version 4.1.13 only; version 4.1.14 only; version 4.1.15 only; version 5.0.5.0.21 only; …
• Oracle MySQL: version 4.1.6 only; version 4.1.7 only; version 4.1.9 only; version 4.1.11 only; version 4.1.16 only; version 4.1.18 only; …

Published 2006-07-21. Last modified 2026-06-16.