Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.5
CVSSv2

CVE-2006-7232

Published: 31/12/2006 Updated: 17/10/2018
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P
Subscribe to Mysql

Vulnerability Summary

sql_select.cc in MySQL 5.0.x prior to 5.0.32 and 5.1.x prior to 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mysql mysql

canonical ubuntu linux 7.04

canonical ubuntu linux 7.10

canonical ubuntu linux 6.06

canonical ubuntu linux 6.10

Vendor Advisories

Ubuntu Security Notice: mysql-dfsg-5.0 regression
USN-588-1 fixed vulnerabilities in MySQL In fixing CVE-2007-2692 for Ubuntu 606, additional improvements were made to make privilege checks more restictive As a result, an upstream bug was exposed which could cause operations on tables or views in a different database to fail This update fixes the problem ...
Ubuntu Security Notice: mysql-dfsg-5.0 vulnerabilities
Masaaki Hirose discovered that MySQL could be made to dereference a NULL pointer An authenticated user could cause a denial of service (application crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table This issue only affects Ubuntu 606 and 610 (CVE-2006-7232) ...

References

CWE-89http://bugs.mysql.com/bug.php?id=22413http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-32.htmlhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-14.htmlhttp://www.ubuntu.com/usn/usn-588-1http://www.securityfocus.com/bid/28351http://secunia.com/advisories/29443http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlhttp://secunia.com/advisories/31687http://secunia.com/advisories/30351http://www.redhat.com/support/errata/RHSA-2008-0364.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11720https://nvd.nist.govhttps://usn.ubuntu.com/588-2/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook