MySQL Query-Logging Bypass Vulnerability

vendor:

MySQL

by:

SecurityFocus

7.5

CVSS

HIGH

Bypass Query-Logging

CWE

Product Name: MySQL

Affected Version From: 5.0.18

Affected Version To: 5.0.18

Patch Exists: YES

Related CWE: N/A

CPE: a:mysql:mysql:5.0.18

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2006

MySQL Query-Logging Bypass Vulnerability

MySQL is prone to a query-logging-bypass vulnerability. This issue is due to a discrepancy between the handling of NULL bytes in the 'mysql_real_query()' function and in the query-logging functionality. This issue allows attackers to bypass the query-logging functionality of the database so they can cause malicious SQL queries to be improperly logged. This may help them hide the traces of their malicious activity from administrators.

Mitigation:

Administrators should ensure that all queries are properly logged and monitored.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/16850/info

MySQL is prone to a query-logging-bypass vulnerability. This issue is due to a discrepancy between the handling of NULL bytes in the 'mysql_real_query()' function and in the query-logging functionality.

This issue allows attackers to bypass the query-logging functionality of the database so they can cause malicious SQL queries to be improperly logged. This may help them hide the traces of their malicious activity from administrators.

This issue affects MySQL version 5.0.18; other versions may also be affected.

PHP code designed to exploit this issue is provided:

mysql_connect(...);
mysql_query('/*'.chr(0).'*/ SELECT * FROM table');