Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-4380

11
FAUCET Score

CVE-2006-4380 describes a denial-of-service vulnerability in MySQL versions prior to 4.1.13, where a local attacker can crash a replication slave through a specially crafted query involving multiupdate and subselects. This vulnerability has a low severity CVSS score of 2.1, indicating a local attack vector with low complexity and a partial availability impact. There is no evidence of active exploitation, nor are there any publicly available exploit tools like Metasploit or Nuclei modules. Furthermore, the vulnerability has received minimal community discussion or media coverage, suggesting a low level of public awareness and concern.

Impacted Technologies

VendorProductVersion(s)CPE
4.1.13CPE matchmatch criteria
cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

2.1LOW

AV:L/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.47%
Probability of exploitation in next 30 days
EPSS Percentile
38.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0047 is in the 72nd percentile among its peer group of 2,096 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: mysql-0:4.1.20-1.RHEL4.1
View patch

Vendor Advisories (1)

redhatCVE-2006-4380Moderate

security flaw

May 28, 2005

References

bugs.mysql.com / 10442
Exploit
lists.mysql.com / internals/26123
Patch
secunia.com / advisories/21712
Vendor Advisory
secunia.com / advisories/21762
Vendor Advisory
securitytracker.com / id
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10686
debian.org / security/2006/dsa-1169
mandriva.com / security/advisories
securityfocus.com / bid/19794