Description

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.

Remediation

References

CVE-2010-3683

Related Vulnerabilities

WordPress Plugin Cimy User Extra Fields Denial of Service (2.6.3)

PHP Other Vulnerability (CVE-2005-1042)

WordPress Plugin WP DS FAQ 'ajax.php' SQL Injection (1.3.2)

WordPress Plugin WordPress File Upload Directory Traversal (4.12.2)

WordPress Plugin Yet Another bol.com Cross-Site Scripting (1.4)

Severity

Medium

Classification

CVE-2010-3683

Tags

Missing Update Known Vulnerabilities