Signature Detail

DB: Oracle MySQL Database IN and CASE NULL Argument Denial of Service

This signature detects attempts to exploit a known denial of service vulnerability in Oracle MySQL database server. It is due to an error while handling IN or CASE functions when NULL arguments are passed to the functions either by the WITH ROLLUP modifier or explicitly. Remote authenticated attackers can exploit this by sending malicious command packets to the server. A successful attack can cause the target server to terminate, denying service to all users until the server is restarted.