SQL: Format String In Request
This signature detects attempts to exploit a known vulnerability against a MySQL database server. A successful attack can lead to arbitrary code execution.
Extended Description
MySQL is prone to multiple format-string vulnerabilities. Attackers can leverage these issues to execute arbitrary code within the context of the vulnerable application. Failed attacks will likely cause denial-of-service conditions. MySQL 4.0.0 through 5.0.75 are vulnerable; other versions may also be affected.
Affected Products
Mysql_ab mysql,Mysql_ab mysql
Short Name
DB:MYSQL:FS-REQUEST
Severity
Minor
Recommended
False
Recommended Action
None
Category
DB
Keywords
CVE-2009-2446 Format In Request String bid:35609
Release Date
07/21/2009
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3729
False Positive
Unknown
Vendors
Red_hat
Suse
Apple
Gentoo
Rpath
Ubuntu
Mandriva
Mysql_ab
Debian
CVSS Score
8.5