MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed by an MS-DOS device name such as (1) LPT1 or (2) PRN.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mysql | Oracle | 4.1.9 (including) | 4.1.9 (including) |