Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
DB:MYSQL:MYSQL-IFDOS |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
MySQL IF Query Handling Remote Denial Of Service Vulnerability |
Release Date |
2007/06/13 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
DB: MySQL IF Query Handling Remote Denial Of Service Vulnerability
This signature detects attempts to exploit a known vulnerability against MySQL Database. A successful attack can result in a denial-of-service condition.
Extended Description
MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted queries. An attacker can exploit this issue to crash the application, denying access to legitimate users. NOTE: An attacker must be able to execute arbitrary SELECT statements against the database to exploit this issue. This may be through legitimate means or by exploiting other latent SQL-injection vulnerabilities. Versions prior to MySQL 5.0.40 are vulnerable.
Affected Products
- Debian linux 4.0
- Debian linux 4.0 Alpha
- Debian linux 4.0 Amd64
- Debian linux 4.0 Arm
- Debian linux 4.0 Hppa
- Debian linux 4.0 Ia-32
- Debian linux 4.0 Ia-64
- Debian linux 4.0 M68k
- Debian linux 4.0 Mips
- Debian linux 4.0 Mipsel
- Debian linux 4.0 Powerpc
- Debian linux 4.0 S/390
- Debian linux 4.0 Sparc
- Mandriva corporate_server 4.0
- Mandriva corporate_server 4.0.0 X86 64
- Mandriva linux_mandrake 2007.0
- Mandriva linux_mandrake 2007.0 X86 64
- Mandriva linux_mandrake 2007.1
- Mandriva linux_mandrake 2007.1 X86 64
- Mysql_ab mysql 5.0
- Mysql_ab mysql 5.0.0 .0-0
- Mysql_ab mysql 5.0.0 .0-Alpha
- Mysql_ab mysql 5.0.1
- Mysql_ab mysql 5.0.18
- Mysql_ab mysql 5.0.19
- Mysql_ab mysql 5.0.2
- Mysql_ab mysql 5.0.20
- Mysql_ab mysql 5.0.21
- Mysql_ab mysql 5.0.22
- Mysql_ab mysql 5.0.22 -1-0.1
- Mysql_ab mysql 5.0.24
- Mysql_ab mysql 5.0.27
- Mysql_ab mysql 5.0.3
- Mysql_ab mysql 5.0.32
- Mysql_ab mysql 5.0.33
- Mysql_ab mysql 5.0.36
- Mysql_ab mysql 5.0.37
- Mysql_ab mysql 5.0.38
- Mysql_ab mysql 5.0.39
- Mysql_ab mysql 5.0.4
- Pardus linux 2007.1
- Red_hat enterprise_linux 5 Server
- Red_hat enterprise_linux_desktop 5 Client
- Red_hat enterprise_linux_desktop_workstation 5 Client
- Rpath rpath_linux 1
- Suse linux 10.0 Ppc
- Suse linux 10.0 X86
- Suse linux 10.0 X86-64
- Suse linux 10.1 Ppc
- Suse linux 10.1 X86
- Suse linux 10.1 X86-64
- Suse linux_desktop 1.0.0
- Suse novell_linux_desktop 9.0.0
- Suse novell_linux_pos 9
- Suse open-enterprise-server
- Suse opensuse 10.2
- Suse opensuse 10.3
- Suse suse_linux_enterprise_desktop 10 SP1
- Suse suse_linux_enterprise_sdk 10 SP1
- Suse suse_linux_enterprise_server 10 SP1
- Suse suse_linux_enterprise_server 8
- Suse suse_linux_enterprise_server 9
- Suse suse_linux_openexchange_server 4.0.0
- Suse suse_linux_retail_solution 8.0.0
- Suse suse_linux_school_server_for_i386
- Suse suse_linux_standard_server 8.0.0
- Suse unitedlinux 1.0.0
- Trustix secure_linux 3.0.5
- Ubuntu ubuntu_linux 6.06 LTS Amd64
- Ubuntu ubuntu_linux 6.06 LTS I386
- Ubuntu ubuntu_linux 6.06 LTS Powerpc
- Ubuntu ubuntu_linux 6.06 LTS Sparc
- Ubuntu ubuntu_linux 6.10 Amd64
- Ubuntu ubuntu_linux 6.10 I386
- Ubuntu ubuntu_linux 6.10 Powerpc
- Ubuntu ubuntu_linux 6.10 Sparc
- Ubuntu ubuntu_linux 7.04 Amd64
- Ubuntu ubuntu_linux 7.04 I386
- Ubuntu ubuntu_linux 7.04 Powerpc
- Ubuntu ubuntu_linux 7.04 Sparc
References
- BugTraq: 23911
- CVE: CVE-2007-2583
- URL: http://bugs.mysql.com/bug.php?id=27513