NVD

Id
53604  
Name
CVE-2007-1420  
Description
MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort function.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-03-12  
Modified Date
2011-09-01  
Seq
2007-1420  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271617 53604 CVE-2007-1420 http://bugs.mysql.com/bug.php?id=24630  View
271618 53604 CVE-2007-1420 http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-36.html  View
271619 53604 CVE-2007-1420 oval:org.mitre.oval:def:9530  View
271620 53604 CVE-2007-1420 GLSA-200705-11  View
271621 53604 CVE-2007-1420 2413  View
271622 53604 CVE-2007-1420 MDKSA-2007:139  View
271623 53604 CVE-2007-1420 RHSA-2008:0364  View
271624 53604 CVE-2007-1420 http://www.sec-consult.com/284.html  View
271625 53604 CVE-2007-1420 20070309 SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service  View
271626 53604 CVE-2007-1420 22900  View
271627 53604 CVE-2007-1420 1017746  View
271628 53604 CVE-2007-1420 USN-440-1  View
271629 53604 CVE-2007-1420 ADV-2007-0908  View
271630 53604 CVE-2007-1420 https://issues.rpath.com/browse/RPL-1127  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51551 JVNDB-2007-000213 MySQL における単一列副問い合わせによるサービス運用妨害 (DoS) の脆弱性 MySQL には、information_schema 上のテーブルに対して ORDER BY により単一列 (single-row) 指定のソートを行う副問い合わせ (subselect) が実行された場合に、filesort() 関数において Null ポインタデリファレンスが発生する脆弱性が存在します。 CVE-2007-1420 24775 CVE-2007-1420 53604 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000213.html 2007-03-12 2008-08-13 View