Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0836
HistoryNov 03, 2004 - 5:00 a.m.

CVE-2004-0836

2004-11-0305:00:00
CWE-119
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.5%

JSON

Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).

Affected configurations

NVD
Node
oraclemysqlRange3.20–3.23.49
OR
oraclemysqlRange4.0.0–4.0.21
Node
debiandebian_linuxMatch3.0

Related

cve 1
openvas 12
freebsd 1
nessus 10
ubuntucve 1
cvelist 1
gentoo 1
debian 2
osv 1
ubuntu 1
redhat 3
cve
cve
CVE-2004-0836
2004-11-03 05:00:00
openvas
openvas
MySQL < 4.0.21 Buffer Overflow Vulnerability
2005-11-03 00:00:00
FreeBSD Ports: mysql-server
2008-09-04 00:00:00
FreeBSD Ports: mysql-server
2008-09-04 00:00:00
freebsd
freebsd
mysql -- mysql_real_connect buffer overflow vulnerability
2004-06-04 00:00:00
nessus
nessus
FreeBSD : mysql -- mysql_real_connect buffer overflow vulnerability (835256b8-46ed-11d9-8ce0-00065be4b5b6)
2005-07-13 00:00:00
MySQL < 4.0.21 mysql_real_connect() Function Remote Overflow
2004-08-20 00:00:00
Debian DSA-562-1 : mysql - several vulnerabilities
2004-11-10 00:00:00
ubuntucve
ubuntucve
CVE-2004-0836
2004-11-03 00:00:00
cvelist
cvelist
CVE-2004-0836
2004-10-16 04:00:00
gentoo
gentoo
MySQL: Multiple vulnerabilities
2004-10-24 00:00:00
debian
debian
[SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities
2004-10-11 09:24:18
[SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities
2004-10-11 09:24:18
osv
osv
mysql - several vulnerabilities
2004-10-11 00:00:00
ubuntu
ubuntu
mysql vulnerabilities
2004-11-25 00:00:00
redhat
redhat
(RHSA-2004:611) mysql-server security update
2004-10-27 00:00:00
(RHSA-2004:569) mysql security update
2004-10-20 00:00:00
(RHSA-2004:597) mysql security update
2004-10-20 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.5%

JSON
Related for NVD:CVE-2004-0836
cve1openvas12freebsd1nessus10ubuntucve1cvelist1gentoo1debian2osv1ubuntu1redhat3