CVE-2002-0969

Buffer overflow in MySQL daemon mysqld before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group...

PT-2002-1978 · Oracle · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL versions 3.23.x through 3.23.49 MySQL versions 4.0 beta through 4.0.1 Description: A buffer overflow issue in the MySQL daemon allows local users to execute arbitrary code via a long datadir parameter in the my.ini initialization file...

CVE-2001-1255

CVE-2001-1255 affects WinMySQLadmin 1.1, where the MySQL password is stored in plain text in the my.ini file. This allows local users to obtain unauthorized access to the MySQL database. The available sources describe the root cause as plaintext storage of credentials in a configuration file, ena...