Every CVE Search/ Get API key

CVE-2006-3081

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote...

4.0 MediumPublic exploitFix available

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

Exploit likelihood

25.8%Up 14.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

Record
CVE-2006-3081
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

Record
CVE-2006-3081
Updated
2026-11-02
EUVDEUVD-2006-3078 No score

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

Record
EUVD-2006-3078
Updated
2026-11-03
GitHub AdvisoriesGHSA-87h3-8fr8-25m3 No score

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote...

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

Record
GHSA-87h3-8fr8-25m3
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mysql-dfsg-4.1
Debian:3.1
 before 4.1.11a-4sarge5, plus listed versions
4.1.11a-44.1.11a-4sarge14.1.11a-4sarge24.1.11a-4sarge34.1.11a-4sarge4
4.1.11a-4sarge5
mysql
Red Hat:enterprise_linux:4::as
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-bench
Red Hat:enterprise_linux:4::as
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-devel
Red Hat:enterprise_linux:4::as
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-server
Red Hat:enterprise_linux:4::as
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql
Red Hat:enterprise_linux:4::desktop
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-bench
Red Hat:enterprise_linux:4::desktop
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-devel
Red Hat:enterprise_linux:4::desktop
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
Show 17 moreShow less
Affected packages
PackageAffectedFixed
mysql-server
Red Hat:enterprise_linux:4::desktop
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql
Red Hat:enterprise_linux:4::es
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-bench
Red Hat:enterprise_linux:4::es
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-devel
Red Hat:enterprise_linux:4::es
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-server
Red Hat:enterprise_linux:4::es
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql
Red Hat:enterprise_linux:4::ws
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-bench
Red Hat:enterprise_linux:4::ws
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-devel
Red Hat:enterprise_linux:4::ws
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql-server
Red Hat:enterprise_linux:4::ws
 before 0:4.1.20-1.RHEL4.1
0:4.1.20-1.RHEL4.1
mysql
Red Hat:rhel_application_stack:1
 before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-bench
Red Hat:rhel_application_stack:1
 before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-debuginfo
Red Hat:rhel_application_stack:1
 before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-devel
Red Hat:rhel_application_stack:1
 before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-server
Red Hat:rhel_application_stack:1
 before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-test
Red Hat:rhel_application_stack:1
 before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMySQL Server 4/5 - Str_To_Date Remote Denial of Service2006-06-14

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3081 is a medium vulnerability (CVSS 4.0) in Mysql, published June 19, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 25.8%, the 97th percentile. Fixed in mysql-dfsg-4.1 4.1.11a-4sarge5.

References

Show 66 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open