Description
MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.
References
- 2004-0054 vendor-advisory
- http://lists.mysql.com/packagers/202
- GLSA-200410-22 vendor-advisory
- mysql-match-against-dos(17768) vdb-entry
- SUSE-SR:2004:001 vendor-advisory
- http://bugs.mysql.com/bug.php?id=3870