DB: MySQL Long Function Name

This signature detects SQL commands that create long function names. MySQL contains a vulnerability in function naming that can allow a malicious user to halt the SQL daemon. A sophisticated attack can allow arbitrary code execution.

Extended Description

MySQL is prone to a buffer-overflow vulnerability. The application fails to perform sufficient boundary checks on data supplied as an argument in a user-defined function. A database user with sufficient access to create a user-defined function can exploit this issue. Attackers may also be able to exploit this issue through latent SQL-injection vulnerabilities in third-party applications that use the database as a backend. Successful exploits will allow arbitrary code to run in the context of the database server process.

Affected Products

Mysql_ab mysql

References

BugTraq: 14509

CVE: CVE-2005-2558

URL: http://www.appsecinc.com/resources/alerts/mysql/2005-002.html http://www.sans.org/newsletters/risk/display.php?v=4&i=32#05.32.18

Short Name

DB:MYSQL:LONG-FUNC

Severity

Minor

Recommended

False

Recommended Action

None

DB: MySQL Long Function Name

Extended Description

Affected Products

References

Found a potential security threat?