Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2002-1374

Disclosure Date: December 23, 2002 (last updated February 22, 2025)
The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.
0
0
Attacker Value
Unknown

CVE-2002-1376

Disclosure Date: December 23, 2002 (last updated February 22, 2025)
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
0
0
Attacker Value
Unknown

CVE-2002-1375

Disclosure Date: December 23, 2002 (last updated February 22, 2025)
The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.
0
0