MySQL versions 5.0.18 and below suffer from a query logging bypass flaw.
7e1967516440d73fa1a3f10d68c0811102cd228516f451ad259cb74d246b3c24
RST/GHC advisory#39
Product: MySQL
Version: <=5.0.18
URL: http://www.mysql.com/
[Summary]
An attacker has the opportunity to bypass query logging.
[Details]
In case the " log" parameter is On, server saves all database queries in file.
Attacker can use NULL symbol in query to bypass loggin.
All data after NULL symbol will cut off and attacker's queries won't be logged.
[Exploit]
mysql_connect(...);
mysql_query('/*'.chr(0).'*/ SELECT * FROM table');
[Author]
1dt.w0lf
RST/GHC
http://rst.void.ru
http://ghc.ru