CVE-2006-3486

CVE-2006-3486 describes an off-by-one buffer overflow in the Instance Manager of MySQL versions before 5.0.23 and 5.1 before 5.1.12, potentially leading to a local denial of service (application crash). The vendor disputes its classification as a vulnerability, arguing that exploitation requires access levels that already permit disruption. With a CVSS score of 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P), this vulnerability is considered low severity, requiring local access and resulting only in partial availability impact. There is no evidence of active exploitation, no known exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, indicating a very low exploitation risk.