ID de Prueba:	1.3.6.1.4.1.25623.1.0.80075
Categoría:	Databases
Título:	MySQL Single Row Subselect Remote DoS
Resumen:	The remote database server is prone to a denial of service attack.
Descripción:	Summary: The remote database server is prone to a denial of service attack. Vulnerability Insight: According to its banner, the version of MySQL on the remote host is older than 5.0.37. Such versions are vulnerable to a remote denial of service when processing certain single row subselect queries. Vulnerability Impact: A malicious user can crash the service via a specially-crafted SQL query. Solution: Upgrade to MySQL version 5.0.37 or newer. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	BugTraq ID: 22900 Common Vulnerability Exposure (CVE) ID: CVE-2007-1420 http://www.securityfocus.com/bid/22900 Bugtraq: 20070309 SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service (Google Search) http://www.securityfocus.com/archive/1/462339/100/0/threaded http://security.gentoo.org/glsa/glsa-200705-11.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:139 http://www.sec-consult.com/284.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9530 http://www.redhat.com/support/errata/RHSA-2008-0364.html http://www.securitytracker.com/id?1017746 http://secunia.com/advisories/24483 http://secunia.com/advisories/24609 http://secunia.com/advisories/25196 http://secunia.com/advisories/25389 http://secunia.com/advisories/25946 http://secunia.com/advisories/30351 http://securityreason.com/securityalert/2413 http://www.ubuntu.com/usn/usn-440-1 http://www.vupen.com/english/advisories/2007/0908
Copyright	This script is Copyright (C) 2008 David Maciejak

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.