MySQL Multiupdate and Subselects Denial Of Service Vulnerability
BID:19794
CVE-2006-4380 |Info
MySQL Multiupdate and Subselects Denial Of Service Vulnerability
| Bugtraq ID: | 19794 |
| Class: | Design Error |
| CVE: |
CVE-2006-4380 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 31 2006 12:00AM |
| Updated: | Sep 07 2006 08:18PM |
| Credit: | The vendor has disclosed this issue. |
| Vulnerable: |
MySQL AB MySQL 4.1.12 MySQL AB MySQL 4.1.11 MySQL AB MySQL 4.1.7 MySQL AB MySQL 4.1.5 MySQL AB MySQL 4.1.4 MySQL AB MySQL 4.1.3 -beta MySQL AB MySQL 4.1.3 -beta MySQL AB MySQL 4.1.3 -0 MySQL AB MySQL 4.1.2 -alpha MySQL AB MySQL 4.1 .11 MySQL AB MySQL 4.0.27 MySQL AB MySQL 4.0.26 MySQL AB MySQL 4.0.25 MySQL AB MySQL 4.0.24 MySQL AB MySQL 4.0.23 MySQL AB MySQL 4.0.21 MySQL AB MySQL 4.0.20 MySQL AB MySQL 4.0.18 MySQL AB MySQL 4.0.17 MySQL AB MySQL 4.0.15 MySQL AB MySQL 4.0.14 MySQL AB MySQL 4.0.13 MySQL AB MySQL 4.0.12 MySQL AB MySQL 4.0.11 -gamma MySQL AB MySQL 4.0.11 MySQL AB MySQL 4.0.10 MySQL AB MySQL 4.0.9 -gamma MySQL AB MySQL 4.0.9 MySQL AB MySQL 4.0.8 -gamma MySQL AB MySQL 4.0.8 MySQL AB MySQL 4.0.7 -gamma MySQL AB MySQL 4.0.7 MySQL AB MySQL 4.0.6 MySQL AB MySQL 4.0.5 a MySQL AB MySQL 4.0.5 MySQL AB MySQL 4.0.4 MySQL AB MySQL 4.0.3 MySQL AB MySQL 4.0.2 MySQL AB MySQL 4.0.1 MySQL AB MySQL 4.0 .0 MySQL AB MySQL 4.1.11a MySQL AB MySQL 4.1.10a MySQL AB MySQL 4.1.0.0-alpha MySQL AB MySQL 4.1.0-0 MySQL AB MaxDB 7.5 .00.26 MySQL AB MaxDB 7.5 .00.25 MySQL AB MaxDB 7.5 .00.24 MySQL AB MaxDB 7.5 .00.23 MySQL AB MaxDB 7.5 .00.19 MySQL AB MaxDB 7.5 .00.18 MySQL AB MaxDB 7.5 .00.16 MySQL AB MaxDB 7.5 .00.15 MySQL AB MaxDB 7.5 .00.14 MySQL AB MaxDB 7.5 .00.12 MySQL AB MaxDB 7.5 .00.11 MySQL AB MaxDB 7.5 .00.08 MySQL AB MaxDB 7.5 .00 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 |
| Not Vulnerable: |
MySQL AB MySQL 4.1.13 |
Discussion
MySQL Multiupdate and Subselects Denial Of Service Vulnerability
MySQL is prone to multiple local denial-of-service vulnerabilities.
An attacker can exploit these issues to crash the slave replication process.
Versions prior to 4.1.13 are reported vulnerable.
MySQL is prone to multiple local denial-of-service vulnerabilities.
An attacker can exploit these issues to crash the slave replication process.
Versions prior to 4.1.13 are reported vulnerable.
Exploit / POC
MySQL Multiupdate and Subselects Denial Of Service Vulnerability
Attackers use standard database client software to exploit this issue.
Attackers use standard database client software to exploit this issue.
Solution / Fix
MySQL Multiupdate and Subselects Denial Of Service Vulnerability
Solution:
The vendor has released version 4.1.13 to address this issue. Please contact the vendor for details on how to obtain and apply this update.
Solution:
The vendor has released version 4.1.13 to address this issue. Please contact the vendor for details on how to obtain and apply this update.
References
MySQL Multiupdate and Subselects Denial Of Service Vulnerability
References:
References:
- MySQL Homepage (Oracle)