Description: 1dt.w0lf has discovered a security issue in MySQL, which can be exploited by malicious users to bypass certain security restrictions.
The security issue is caused due to an error within the handling of query logging. This can be exploited to cause part of the query to be incorrectly logged if the query contains the NULL character.
Example:
mysql_query("/*".chr(0)."*/ SELECT * FROM table");
The security issue has been confirmed in version 5.0.18. Other versions may also be affected.
Solution: Update to version 5.0.23.
Provided and/or discovered by: 1dt.w0lf
Changelog: 2006-03-02: Added CVE reference.
2006-05-11: Updated "Solution" section. Added link to MySQL bug report.
2006-07-10: Updated "Solution" section.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
