DB: MySQL IF Query Handling Remote Denial Of Service Vulnerability

This signature detects attempts to exploit a known vulnerability against MySQL Database. A successful attack can result in a denial-of-service condition.

Extended Description

MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted queries. An attacker can exploit this issue to crash the application, denying access to legitimate users. NOTE: An attacker must be able to execute arbitrary SELECT statements against the database to exploit this issue. This may be through legitimate means or by exploiting other latent SQL-injection vulnerabilities. Versions prior to MySQL 5.0.40 are vulnerable.

Affected Products

Suse linux_desktop

References

BugTraq: 23911

CVE: CVE-2007-2583

URL: http://bugs.mysql.com/bug.php?id=27513

Short Name

DB:MYSQL:MYSQL-IFDOS

Severity

Minor

Recommended

False

Recommended Action

Drop

DB: MySQL IF Query Handling Remote Denial Of Service Vulnerability

Extended Description

Affected Products

References

Found a potential security threat?