Description

MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed by an MS-DOS device name such as (1) LPT1 or (2) PRN.

Remediation

References

CVE-2005-0799

Related Vulnerabilities

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45556)

Internet Information Services Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-1899)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3463)

Java Unspesificed Vulnerability (CVE-2018-2972)

Apache Tomcat Improper Access Control Vulnerability (CVE-2016-8735)

Severity

Medium

Classification

CVE-2005-0799

Tags

Missing Update Known Vulnerabilities