Denial-of-Service Archives - Sysadmins of the North

MySQL DoS in the Procedure Analyse Function – CVE-2015-4870

30 May 2016
/ Security
/ By Jan Reilink
/

Sri Lankan Security researcher Osanda Malith discovered a DoS -or crash- vulnerability in MySQL’s Procedure Analyse Function. The vulnerability crashes MySQL versions up to 5.5.45.

BIND 9.x vulnerable for remote Denial of Service through a magic packet

31 July 2015
/ Security
/ By Jan Reilink
/

A vulnerability in BIND, and all it takes is just one tiny little packet…

BIND 9.x is vulnerable for a remote Denial of Service, where a tiny magic packet can cause BIND 9.x to stop and exit named with a REQUIRE assertion failure. All the attacker needs to send is a specially – and deliberately – constructed packet to exploit an error in the handling of queries for TKEY records. The vulnerability in BIND will crash and take down the BIND named daemon…

MySQL sleep() attacks

5 August 2014
/ Security
/ By Jan Reilink
/ 6 COMMENTS
/

How to put a MySQL server to sleep()

MySQL sleep() command injection attacks: how not validating your PHP user input can lead to Denial of Service (DoS) attacks against websites and back-end database servers. Simply by putting “AND sleep(3)” in the address bar… Happy SQL injection!