{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eMySQL versions 5.x ant\u00e9rieures \u00e0 5.0.37.\u003c/P\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les versions de MySQL 5\nant\u00e9rieures \u00e0 5.0.37. La faille se situe dans la fonction filesort() et\npermet \u00e0 un attaquant d\u0027effectuer un d\u00e9ni de service \u00e0 distance en\nenvoyant une requ\u00eate malform\u00e9e.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2007-03-12T00:00:00",
  "last_revision_date": "2007-03-12T00:00:00",
  "links": [
    {
      "title": "Mises \u00e0 jour de MySQL 5 :",
      "url": "http://dev.mysql.com/downloads/mysql/5.0.html#downloads"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 20070309-0 de SEC-Consult :",
      "url": "http://www.sec-consult.com/284.html"
    }
  ],
  "reference": "CERTA-2007-AVI-118",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-03-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans les versions de MySQL 5 ant\u00e9rieures \u00e0 5.0.37\npermet \u00e0 une personne malintentionn\u00e9e de faire un d\u00e9ni de service \u00e0\ndistance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans MySQL",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 20070309-0 de SEC Consult",
      "url": null
    }
  ]
}