MySQL MATCH ... AGAINST SQL statement denial of service
| mysql-match-against-dos (17768) |  Medium Risk |
Description:
MySQL is vulnerable to a denial of service attack. A remote attacker could issue the MATCH ... AGAINST SQL statement containing a double quote ("), without a matching closing double quote, to cause the server to crash.
Consequences:
Denial of Service
Remedy:
For Trustix Secure Linux:
Upgrade to the latest mysql package, as listed below. Refer to Trustix Secure Linux Security Advisory #2004-0054 for more information. See References.
Trustix Secure Linux 1.5: 3.23.58-3tr or later
Trustix Secure Linux 2.0 and 2.1: 4.0.21-0.1tr or later
Trustix Secure Linux Enterprise Server 2: 4.0.21-1tr or later
For Ubuntu Linux:
Upgrade to the latest mysql-server package (4.0.20-2ubuntu1.1 or later), as listed in USN-32-1 November 25, 2004. See References.
For other distributions:
Contact your vendor for upgrade or patch information.
References:
- MySQL Bug #3870: Crash on FTS query.
- Trustix Secure Linux Security Advisory #2004-0054: Multiple security vulnerabilities.
- BID-11432: MySQL Remote FULLTEXT Search Denial Of Service Vulnerability
- CVE-2004-0956: MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.
- SUSE-SR:2004:001: SUSE Security Summary Report
- USN-32-1: mysql vulnerabilities
Platforms Affected:
- Canonical Ubuntu 4.10
- MySQL MySQL 4.0.20
- Trustix Secure Enterprise Linux 2.0
- Trustix Secure Linux 1.5
- Trustix Secure Linux 2.0
- Trustix Secure Linux 2.1
Reported:
Oct 15, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net