{"id": "CVE-2001-1454", "bulletinFamily": "NVD", "title": "CVE-2001-1454", "description": "Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.", "published": "2001-02-09T00:00:00", "modified": "2017-07-10T21:29:08", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2001-1454", "reporter": "NVD", "references": ["https://exchange.xforce.ibmcloud.com/vulnerabilities/6419", "http://dev.mysql.com/doc/mysql/en/news-3-23-33.html", "http://www.kb.cert.org/vuls/id/367320", "http://www.securityfocus.com/archive/1/161917"], "cvelist": ["CVE-2001-1454"], "type": "cve", "lastseen": "2017-07-11T11:14:06", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:mysql:mysql:3.23.32"], "cvelist": ["CVE-2001-1454"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.", "edition": 1, "enchantments": {}, "hash": "5f920d9011233de1e07f625c37ea686463b399774ac52fa5a7f38d56a1986ed0", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "67549e09be03a44e6938b2bf8e5dbe35", "key": "description"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "f211d46e5f46bfb23d6e9b537e44260d", "key": "modified"}, {"hash": "5410d046ef9b7abc83e636f85f2d310c", "key": "published"}, {"hash": "816d507b0732d9e837615b988085eff7", "key": "href"}, {"hash": "a98b60a745d96a6092949fb0a8535391", "key": "cvelist"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "39b3c3fdf1652d3d28deb2a5712f80bb", "key": "cpe"}, {"hash": "22ce59fe2bef1c6bbe30b26859c0960a", "key": "references"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "f1ba03e543577a96167ffd6552c8f87b", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2001-1454", "id": "CVE-2001-1454", "lastseen": "2016-09-03T03:13:24", "modified": "2008-09-05T16:26:36", "objectVersion": "1.2", "published": "2001-02-09T00:00:00", "references": ["http://xforce.iss.net/xforce/xfdb/6419", "http://dev.mysql.com/doc/mysql/en/news-3-23-33.html", "http://www.kb.cert.org/vuls/id/367320", "http://www.securityfocus.com/archive/1/161917"], "reporter": "NVD", "scanner": [], "title": "CVE-2001-1454", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T03:13:24"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "39b3c3fdf1652d3d28deb2a5712f80bb"}, {"key": "cvelist", "hash": "a98b60a745d96a6092949fb0a8535391"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "67549e09be03a44e6938b2bf8e5dbe35"}, {"key": "href", "hash": "816d507b0732d9e837615b988085eff7"}, {"key": "modified", "hash": "2d4f7c49e73b10bc25ac793534d674ae"}, {"key": "published", "hash": "5410d046ef9b7abc83e636f85f2d310c"}, {"key": "references", "hash": "19fc522bb4dc0da94506e8f38777c41d"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "f1ba03e543577a96167ffd6552c8f87b"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "661baa0bf0c86ac52e6859b086c03d17c1ebbbf0a3e163e882638b18b7a9737d", "viewCount": 0, "enchantments": {"score": {"value": 7.5, "vector": "NONE", "modified": "2017-07-11T11:14:06"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "cpe": ["cpe:/a:mysql:mysql:3.23.32"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"osvdb": [{"lastseen": "2017-04-28T13:20:15", "references": [], "edition": 1, "description": "# No description provided by the source\n\n## References:\nVendor URL: http://www.mysql.com/\nISS X-Force ID: 6419\n[CVE-2001-1454](https://vulners.com/cve/CVE-2001-1454)\nCERT VU: 367320\n", "reporter": "OSVDB", "published": "2001-02-09T22:23:44", "title": "MySQL drop database Request Remote Overflow", "type": "osvdb", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2001-1454"], "modified": "2001-02-09T22:23:44", "href": "https://vulners.com/osvdb/OSVDB:18894", "id": "OSVDB:18894", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "nessus": [{"lastseen": "2018-09-02T00:07:32", "references": ["http://dev.mysql.com/doc/refman/4.1/en/news-3-23-33.html", "http://www.nessus.org/u?5396a2f5", "http://www.nessus.org/u?5396a2f5"], "pluginID": "17818", "description": "The version of MySQL installed on the remote host is affected by the following vulnerabilities :\n\n - A buffer overflow in libmysqlclient.so allows a remote attacker to execute arbitrary code via a long host parameter. (CVE-2001-1453)\n\n - A buffer overflow allows a remote attacker to execute arbitrary code via a long DROP DATABASE. (CVE-2001-1454)", "edition": 6, "reporter": "Tenable", "published": "2012-01-18T00:00:00", "title": "MySQL < 3.23.33 Multiple Buffer Overflows", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Databases", "bulletinFamily": "scanner", "cvelist": ["CVE-2001-1453", "CVE-2001-1454"], "modified": "2018-07-16T00:00:00", "cpe": ["cpe:/a:mysql:mysql"], "id": "MYSQL_3_23_33.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=17818", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(17818);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2018/07/16 14:09:12\");\n\n script_cve_id(\"CVE-2001-1453\", \"CVE-2001-1454\");\n script_bugtraq_id(2262);\n script_xref(name:\"CERT\", value:\"123384\");\n script_xref(name:\"CERT\", value:\"367320\");\n\n script_name(english:\"MySQL < 3.23.33 Multiple Buffer Overflows\");\n script_summary(english:\"Checks version of MySQL Server\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote database server is vulnerable to several buffer\noverflow attacks.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of MySQL installed on the remote host is affected by the\nfollowing vulnerabilities :\n\n - A buffer overflow in libmysqlclient.so allows a remote \n attacker to execute arbitrary code via a long host \n parameter. (CVE-2001-1453)\n\n - A buffer overflow allows a remote attacker to execute \n arbitrary code via a long DROP DATABASE. \n (CVE-2001-1454)\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?5396a2f5\");\n script_set_attribute(attribute:\"see_also\", value:\"http://dev.mysql.com/doc/refman/4.1/en/news-3-23-33.html\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?5396a2f5\");\n script_set_attribute(attribute:\"solution\", value:\"Upgrade to MySQL version 3.23.33 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2001/02/09\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/01/18\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"remote\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:mysql:mysql\");\n script_end_attributes();\n \n script_category(ACT_GATHER_INFO);\n script_family(english:\"Databases\");\n\n script_copyright(english:\"This script is Copyright (C) 2012-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"mysql_version.nasl\", \"mysql_login.nasl\");\n script_require_keys(\"Settings/ParanoidReport\");\n script_require_ports(\"Services/mysql\", 3306);\n\n exit(0);\n}\n\n\ninclude(\"mysql_version.inc\");\n\nmysql_check_version(fixed:'3.23.33', severity:SECURITY_HOLE);\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}