Detections
Analytics
MySQL < 5.0.40 IF Query NULL Dereference DoS
medium Log Correlation Engine Plugin ID 801155
Synopsis
The remote database server is prone to a denial of service attack.Description
The version of MySQL installed on the remote host is reportedly affected by a denial of service vulnerability that may be triggered with a specially crafted IF query. An attacker who can execute arbitrary SELECT statements may be able to leverage this issue to crash the affected service.Solution
Upgrade to version 5.0.40 or higher.See Also
dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-41.html
dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html
Plugin Details
Severity: Medium
ID: 801155
Family: Database
Nessus ID: 25198
Risk Information
CVSS v2
Risk Factor: Low
Base Score: 3.3
Temporal Score: 2.7
Vector: CVSS2#AV:A/AC:L/Au:N/C:N/I:N/A:P
Reference Information
CVE: CVE-2007-2583
BID: 23911