Msql Security Vulnerabilities

CVE-1999-0276

mSQL v2.0.1 and below allows remote execution through a buffer overflow.

CVE-1999-0753

The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.

CVE-1999-1260

mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.

CVE-2000-0012

Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.

CVE-2001-1225

Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried.