MySQL 'ALTER DATABASE' Remote Denial Of Service Vulnerability

  1. Network Vulnerabilities
  2. Databases
  3. MySQL 'ALTER DATABASE' Remote Denial Of Service Vulnerability
Summary
The host is running MySQL and is prone to Denial Of Service vulnerability.
Impact
Successful exploitation could allow an attacker to cause a Denial of Service. Impact Level: Application
Solution
Upgrade to MySQL version 5.1.48 For updates refer to http://dev.mysql.com/downloads
Insight
The flaw is due to an error when processing the 'ALTER DATABASE' statement and can be exploited to corrupt the MySQL data directory using the '#mysql50#' prefix followed by a '.' or '..'. NOTE: Successful exploitation requires 'ALTER' privileges on a database.
Affected
MySQL version priot to 5.1.48 on all running platform.
References
Updated on 2015-03-25
Severity
Low Severity
Classification
Related Vulnerabilities