CVE-2010-3676
Oracle MySQL 5.1 - Authenticated Denial of Service via InnoDB Configuration Parameter Modification
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-3676. PoCs published by Elena Stepanova.
AI-analyzed exploit summary This is a writeup describing a DoS vulnerability in MySQL prior to version 5.1.49. The issue involves a specific SQL query that can crash the database, but no functional exploit code is provided.
Description
storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (1) innodb_file_format or (2) innodb_file_per_table configuration parameters for the InnoDB storage engine, then executing a DDL statement.
Exploits (1)
This is a writeup describing a DoS vulnerability in MySQL prior to version 5.1.49. The issue involves a specific SQL query that can crash the database, but no functional exploit code is provided.