Description
MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed by an MS-DOS device name such as (1) LPT1 or (2) PRN.
References
- 20050315 Denial of Service Vulnerability in MySQL Server for Windows mailing-list
- http://bugs.mysql.com/bug.php?id=9148
- 14564 third-party-advisory