Lucene search
K

MySQL 5.0.x Denial Of Service

🗓️ 05 Dec 2013 00:00:00Reported by Neil KettleType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 43 Views

MySQL 5.0.x Denial Of Service vulnerability in handling specially crafted queries, leading to application crash and denial of access to legitimate users

Related
Code
`source: http://www.securityfocus.com/bid/23911/info  
  
MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted queries.  
  
An attacker can exploit this issue to crash the application, denying access to legitimate users.  
  
NOTE: An attacker must be able to execute arbitrary SELECT statements against the database to exploit this issue. This may be through legitimate means or by exploiting other latent SQL-injection vulnerabilities.  
  
Versions prior to MySQL 5.0.40 are vulnerable.  
  
SELECT id from example WHERE id IN(1, (SELECT IF(1=0,1,2/0)));  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation