Lucene search

MitreCVE-2002-1376

HistoryDec 23, 2002 - 5:00 a.m.

CVE-2002-1376

2002-12-2305:00:00

mitre

web.nvd.nist.gov

cve-2002-1376

mysql

libmysqlclient

denial of service

code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.016

Percentile

87.5%

JSON

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Affected configurations

Nvd

Node

oraclemysqlMatch3.22.26

oraclemysqlMatch3.22.27

oraclemysqlMatch3.22.28

oraclemysqlMatch3.22.29

oraclemysqlMatch3.22.30

oraclemysqlMatch3.22.32

oraclemysqlMatch3.23.2

oraclemysqlMatch3.23.3

oraclemysqlMatch3.23.4

oraclemysqlMatch3.23.5

oraclemysqlMatch3.23.8

oraclemysqlMatch3.23.9

oraclemysqlMatch3.23.10

oraclemysqlMatch3.23.23

oraclemysqlMatch3.23.24

oraclemysqlMatch3.23.25

oraclemysqlMatch3.23.26

oraclemysqlMatch3.23.27

oraclemysqlMatch3.23.28

oraclemysqlMatch3.23.29

oraclemysqlMatch3.23.30

oraclemysqlMatch3.23.31

oraclemysqlMatch3.23.34

oraclemysqlMatch3.23.36

oraclemysqlMatch3.23.37

oraclemysqlMatch3.23.38

oraclemysqlMatch3.23.39

oraclemysqlMatch3.23.40

oraclemysqlMatch3.23.41

oraclemysqlMatch3.23.42

oraclemysqlMatch3.23.43

oraclemysqlMatch3.23.44

oraclemysqlMatch3.23.45

oraclemysqlMatch3.23.46

oraclemysqlMatch3.23.47

oraclemysqlMatch3.23.48

oraclemysqlMatch3.23.49

oraclemysqlMatch3.23.50

oraclemysqlMatch3.23.51

oraclemysqlMatch3.23.52

oraclemysqlMatch3.23.53

oraclemysqlMatch3.23.53a

oraclemysqlMatch4.0.0

oraclemysqlMatch4.0.1

oraclemysqlMatch4.0.2

oraclemysqlMatch4.0.3

oraclemysqlMatch4.0.5a

symantec_veritasnetbackup_advanced_reporterMatch3.4

symantec_veritasnetbackup_advanced_reporterMatch4.5

symantec_veritasnetbackup_advanced_reporterMatch4.5_fp1

symantec_veritasnetbackup_advanced_reporterMatch4.5_fp2

symantec_veritasnetbackup_advanced_reporterMatch4.5_fp3

symantec_veritasnetbackup_advanced_reporterMatch4.5_mp1

symantec_veritasnetbackup_advanced_reporterMatch4.5_mp2

symantec_veritasnetbackup_advanced_reporterMatch4.5_mp3

symantec_veritasnetbackup_global_data_managerMatch4.5

symantec_veritasnetbackup_global_data_managerMatch4.5_fp1

symantec_veritasnetbackup_global_data_managerMatch4.5_fp2

symantec_veritasnetbackup_global_data_managerMatch4.5_fp3

symantec_veritasnetbackup_global_data_managerMatch4.5_mp1

symantec_veritasnetbackup_global_data_managerMatch4.5_mp2

symantec_veritasnetbackup_global_data_managerMatch4.5_mp3

VendorProductVersionCPE
oraclemysql3.22.26cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*
oraclemysql3.22.27cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*
oraclemysql3.22.28cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*
oraclemysql3.22.29cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*
oraclemysql3.22.30cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*
oraclemysql3.22.32cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*
oraclemysql3.23.2cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*
oraclemysql3.23.3cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*
oraclemysql3.23.4cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*
oraclemysql3.23.5cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	mysql	3.22.26	cpe:2.3:a:oracle:mysql:3.22.26:::::::*
oracle	mysql	3.22.27	cpe:2.3:a:oracle:mysql:3.22.27:::::::*
oracle	mysql	3.22.28	cpe:2.3:a:oracle:mysql:3.22.28:::::::*
oracle	mysql	3.22.29	cpe:2.3:a:oracle:mysql:3.22.29:::::::*
oracle	mysql	3.22.30	cpe:2.3:a:oracle:mysql:3.22.30:::::::*
oracle	mysql	3.22.32	cpe:2.3:a:oracle:mysql:3.22.32:::::::*
oracle	mysql	3.23.2	cpe:2.3:a:oracle:mysql:3.23.2:::::::*
oracle	mysql	3.23.3	cpe:2.3:a:oracle:mysql:3.23.3:::::::*
oracle	mysql	3.23.4	cpe:2.3:a:oracle:mysql:3.23.4:::::::*
oracle	mysql	3.23.5	cpe:2.3:a:oracle:mysql:3.23.5:::::::*

Rows per page:

1-10 of 621

References

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555

marc.info/?l=bugtraq&m=103971644013961&w=2

marc.info/?l=bugtraq&m=104004857201968&w=2

marc.info/?l=bugtraq&m=104005886114500&w=2

marc.info/?l=bugtraq&m=104033188706000&w=2

security.e-matters.de/advisories/042002.html

www.debian.org/security/2002/dsa-212

www.linuxsecurity.com/advisories/engarde_advisory-2660.html

www.mandriva.com/security/advisories?name=MDKSA-2002:087

www.redhat.com/support/errata/RHSA-2002-288.html

www.securityfocus.com/bid/6370

www.securityfocus.com/bid/6374

exchange.xforce.ibmcloud.com/vulnerabilities/10849

exchange.xforce.ibmcloud.com/vulnerabilities/10850

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.016

Percentile

87.5%

JSON

Related for CVE-2002-1376