Full Disclosure mailing list archives
Re: RE: MySQL DoS
From: Tiago Pedrosa <riftman () gmail com>
Date: Fri, 16 Jun 2006 10:13:00 +0100
Hi, On my debian testing system, with mysql-server-4.1 package: ii mysql-server-4 4.1.15-1 mysql database server binaries it crashes. But I'm able to preforme new comands on mysql prompt, after to reconnect to mysql server. Running query: Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 3718 to server version: 4.1.15-Debian_1-log Type 'help;' or '\h' for help. Type '\c' to clear the buffer. mysql> select str_to_date( 1, NULL ); ERROR 2013 (HY000): Lost connection to MySQL server during query mysql> show databases; ERROR 2006 (HY000): MySQL server has gone away No connection. Trying to reconnect... Connection id: 1 Current database: *** NONE *** +---------------+ | Database | +---------------+ | mysql | | test | +---------------+ 2 rows in set (0.00 sec) mysql> Hope that an new package for debian will be realeased soon. Tiago Pedrosa On Thu, 15 Jun 2006 15:50:21 -0400 "Brent Meshier" <brent () garcia-co com> wrote:
I am not able to reproduce this bug. mysql> select str_to_date( 1, NULL ); +------------------------+ | str_to_date( 1, NULL ) | +------------------------+ | NULL | +------------------------+ 1 row in set (0.00 sec) Brent Meshier Director IT Operations Global Transport Logistics Garcia & Co Fulfillment http://www.garcia-co.com/ (877) 257-SHIP ext 23 -----Original Message----- From: Tonnerre Lombard [mailto:tonnerre.lombard () sygroup ch] Sent: Thursday, June 15, 2006 1:42 AM To: Kanatoko
Cc: bugtraq () securityfocus com; full-disclosure () lists grok org uk Subject: Re: MySQL DoS Salut, On Thu, 2006-06-15 at 02:24 +0900, Kanatoko wrote:A query like "select str_to_date( 1, NULL );" crashes mysqld.mysql Ver 14.12 Distrib 5.0.18, for -netbsd (alpha) using EditLine wrapper -> not affected mysql Ver 14.7 Distrib 4.1.15, for pc-linux-gnu (i486) using readline 5.1 -> affected mysql Ver 12.22 Distrib 4.0.18, for mandrake-linux-gnu (i586) -> affected Tonnerre -- SyGroup GmbH Tonnerre Lombard Loesungen mit System Tel:+41 61 333 80 33 Roeschenzerstrasse 9 Fax:+41 61 383 14 67 4153 Reinach Web:www.sygroup.ch tonnerre.lombard () sygroup ch _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- MySQL DoS Kanatoko (Jun 14)
- Re: MySQL DoS Tonnerre Lombard (Jun 14)
- <Possible follow-ups>
- RE: MySQL DoS Brent Meshier (Jun 15)
- Re: RE: MySQL DoS Cardoso (Jun 15)
- RE: MySQL DoS Tonnerre Lombard (Jun 15)
- Re: RE: MySQL DoS Tiago Pedrosa (Jun 16)
- Re: RE: MySQL DoS Tiago Pedrosa (Jun 16)