CVEs-PoC/2007/CVE-2007-1420.md

CVE-2007-1420

Description

MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort function.

POC

Reference

• http://securityreason.com/securityalert/2413
• http://securityreason.com/securityalert/2413
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9530
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9530

Github

• https://github.com/tomwillfixit/alpine-cvecheck