CVE-2002-1376 in MySQL

Riassunto

di MITRE

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Divulgazione: 23/12/2002
• Moderazione: accettato
• Voce: VDB-19254
• CPE: pronto
• CWE: CWE-119 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.03016
• KEV: no
• Attività: molto basso
• Settore: Chemical, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1376
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1376
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1376/