CVE-2006-7232: SQL Injection
sqlselect.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATIONSCHEMA table, as originally demonstrated using ORDER BY.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-7232?
CVE-2006-7232 has a severity rating that indicates a potential denial of service vulnerability which can lead to a crash of the MySQL server.
How do I fix CVE-2006-7232?
To fix CVE-2006-7232, upgrade MySQL to version 5.0.32 or later, or 5.1.14 or later.
What software is affected by CVE-2006-7232?
CVE-2006-7232 affects MySQL versions 5.0.x before 5.0.32 and 5.1.x before 5.1.14, as well as specific versions of Ubuntu Linux running those MySQL versions.
Can CVE-2006-7232 be exploited remotely?
Yes, CVE-2006-7232 can be exploited by remote authenticated users affecting the MySQL server.
What is the impact of CVE-2006-7232 on MySQL?
The impact of CVE-2006-7232 is that it allows attackers to cause a denial of service by crashing the MySQL server through specific SQL queries.