NetSight
IP …
medium4.0Public exploit code

CVE-2010-3681

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER i…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.

Affected products

VendorProductAffected versions
MysqlMysql
Versions 5.1.5, 5.1.23, 5.1.31, 5.1.32, 5.1.34, 5.1.37
OracleMysql
Versions 5.1, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.6

References