CVE-2009-4019

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2009-4019 has a selected CVSS score of 4.0; EIP currently links 2 catalogued exploits.

Description

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBMySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of ServiceExploitDB exploitby Shane BesterNot analyzed1 file
ExploitDB
PoC details
ExploitDBMySQL 6.0.9 - 'GeomFromWKB()' Function First Argument Geometry Value Handling Denial of ServiceExploitDB exploitby Shane BesterNot analyzed1 file
ExploitDB
PoC details

References

Showing 12 of 23