Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.80075
Kategorie:Databases
Titel:MySQL < 5.0.37 Single Row Subselect Remote DoS Vulnerability
Zusammenfassung:MySQL is prone to a denial of service (DoS) vulnerability.
Beschreibung:Summary:
MySQL is prone to a denial of service (DoS) vulnerability.

Vulnerability Insight:
According to its banner, the version of MySQL on the remote host
is older than 5.0.37. Such versions are vulnerable to a remote denial of service when processing
certain single row subselect queries.

Vulnerability Impact:
A malicious user can crash the service via a specially-crafted
SQL query.

Solution:
Update to version 5.0.37 or later.

CVSS Score:
2.1

CVSS Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2007-1420
BugTraq ID: 22900
http://www.securityfocus.com/bid/22900
Bugtraq: 20070309 SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service (Google Search)
http://www.securityfocus.com/archive/1/462339/100/0/threaded
http://security.gentoo.org/glsa/glsa-200705-11.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:139
http://www.sec-consult.com/284.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9530
http://www.redhat.com/support/errata/RHSA-2008-0364.html
http://www.securitytracker.com/id?1017746
http://secunia.com/advisories/24483
http://secunia.com/advisories/24609
http://secunia.com/advisories/25196
http://secunia.com/advisories/25389
http://secunia.com/advisories/25946
http://secunia.com/advisories/30351
http://securityreason.com/securityalert/2413
http://www.ubuntu.com/usn/usn-440-1
http://www.vupen.com/english/advisories/2007/0908
CopyrightCopyright (C) 2008 David Maciejak

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.