CVE-2006-7232

LowCVSS 3.5/10Last modified Jun 16, 2026

Description

sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.

Metrics

CVSS 2.0 3.5/10AV:N/AC:M/Au:S/C:N/I:N/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.mysql.com/bug.php?id=22413Patch, Vendor Advisory
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-32.htmlVendor Advisory
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-14.htmlVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlThird Party Advisory
http://secunia.com/advisories/29443Third Party Advisory
http://secunia.com/advisories/30351Third Party Advisory
http://secunia.com/advisories/31687Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0364.htmlThird Party Advisory
http://www.securityfocus.com/bid/28351Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-588-1Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11720Third Party Advisory
http://bugs.mysql.com/bug.php?id=22413Patch, Vendor Advisory
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-32.htmlVendor Advisory
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-14.htmlVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlThird Party Advisory
http://secunia.com/advisories/29443Third Party Advisory
http://secunia.com/advisories/30351Third Party Advisory
http://secunia.com/advisories/31687Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0364.htmlThird Party Advisory
http://www.securityfocus.com/bid/28351Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-588-1Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11720Third Party Advisory

Timeline

Published: Dec 31, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-72334.3Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.6.0, and possi CVE-2006-72344.6Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2 CVE-2006-72355.0Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon crash or hang) via (1) multiple STOR (aka P CVE-2006-72369.3The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assist CVE-2006-72377.5PHP remote file inclusion vulnerability in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php in Ixprim 2.0 allows remote attackers to CVE-2006-72384.3Cross-site scripting (XSS) vulnerability in MyShoutPro before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspeci CVE-2006-72395.0The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of s CVE-2006-72407.2gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the su CVE-2006-72414.0The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is de CVE-2006-72424.0The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-001 does not ensure that the AE Administrato CVE-2006-72435.0PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restriction CVE-2006-72445.0Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial