PT-2007-6858 · Oracle+1 · Mysql Server+1

Publicado

2007-11-10

·

Atualizado

2018-10-03

·

CVE-2007-5925

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions MySQL versions 5.1.23-BK and earlier
Description The issue is related to the convert search mode to innobase function in ha innodb.cc in the InnoDB engine, which allows remote authenticated users to cause a denial of service, resulting in a database crash. This is achieved through a specific CONTAINS operation on an indexed column, triggering an assertion error.
Recommendations For MySQL versions 5.1.23-BK and earlier, consider restricting access to the InnoDB engine or limiting the use of CONTAINS operations on indexed columns until a fix is available. As a temporary workaround, avoid using the CONTAINS operation on indexed columns to minimize the risk of a database crash.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-5925
DSA-1413-1
DTSA-91-1
RHSA-2007:1155
RHSA-2007:1157
RHSA-2007_1155

Produtos afetados

Mysql Server
Red Hat