Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle mysql 3.22.28 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2002-1921
The default configuration of MySQL 3.20.32 up to and including 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote malicious users to connect to the database.
Oracle Mysql 3.20.32aOracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.45Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.48Oracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.2Oracle Mysql 3.23.23Oracle Mysql 3.23.37Oracle Mysql 3.23.38Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.52Oracle Mysql 3.23.8Oracle Mysql 3.23.9Oracle Mysql 3.22.26Oracle Mysql 3.22.28Oracle Mysql 3.22.30
NA
CVE-2002-1923
The default configuration in MySQL 3.20.32 up to and including 3.23.52, when running on Windows, does not have logging enabled, which could allow remote malicious users to conduct activities without detection.
Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.22.26Oracle Mysql 3.22.27Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.3Oracle Mysql 3.23.30Oracle Mysql 3.23.31Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.48Oracle Mysql 3.23.49Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.20.32a
NA
CVE-2002-1373
Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x prior to 3.23.54 allows remote malicious users to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.
Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.37Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.45Oracle Mysql 3.23.52Oracle Mysql 3.23.53Oracle Mysql 4.0.3Oracle Mysql 4.0.5aOracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.53a
NA
CVE-2003-1480
MySQL 3.20 up to and including 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for malicious users to decrypt the password via brute force methods.
Oracle Mysql 3.22Oracle Mysql 3.22.27Oracle Mysql 3.23.10Oracle Mysql 3.23.22Oracle Mysql 3.23.24Oracle Mysql 3.23.28Oracle Mysql 3.23.3Oracle Mysql 3.23.36Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.46Oracle Mysql 3.23.50Oracle Mysql 3.23.52Oracle Mysql 3.23.8Oracle Mysql 4.0.0Oracle Mysql 4.0.8Mysql Mysql 4.1.0Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.31
NA
CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Oracle Mysql 3.20.32aOracle Mysql 3.23.10Oracle Mysql 3.23.2Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.33Oracle Mysql 3.23.34Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.50Oracle Mysql 3.23.51Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.12Oracle Mysql 4.0.13Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.9Mysql Mysql 4.1.0
NA
CVE-2004-0957
Unknown vulnerability in MySQL 3.23.58 and previous versions, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activitie...
Oracle Mysql 3.21Oracle Mysql 3.22Oracle Mysql 3.23Oracle Mysql 3.23.10Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.20Oracle Mysql 4.0.3Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.3
NA
CVE-2006-4031
MySQL 4.1 prior to 4.1.21 and 5.0 prior to 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.14Oracle Mysql 3.23.15Oracle Mysql 3.23.21Oracle Mysql 3.23.22Oracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.36Oracle Mysql 3.23.37Oracle Mysql 3.23.43Oracle Mysql 3.23.44Oracle Mysql 3.23.51Oracle Mysql 3.23.52Oracle Mysql 3.23.57Oracle Mysql 3.23.58Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.17Oracle Mysql 4.0.18Oracle Mysql 4.0.25
NA
CVE-2002-1374
The COM_CHANGE_USER command in MySQL 3.x prior to 3.23.54, and 4.x prior to 4.0.6, allows remote malicious users to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the...
Oracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.53aOracle Mysql 3.23.8Symantec Veritas Netbackup Advanced Reporter 3.4Symantec Veritas Netbackup Advanced Reporter 4.5Symantec Veritas Netbackup Global Data Manager 4.5Symantec Veritas Netbackup Global Data Manager 4.5 Fp1Oracle Mysql 3.22.26Oracle Mysql 3.23.2Oracle Mysql 3.23.23Oracle Mysql 3.23.30Oracle Mysql 3.23.31Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.23.48
NA
CVE-2002-1375
The COM_CHANGE_USER command in MySQL 3.x prior to 3.23.54, and 4.x to 4.0.6, allows remote malicious users to execute arbitrary code via a long response.
Oracle Mysql 3.22.27Oracle Mysql 3.22.28Oracle Mysql 3.23.24Oracle Mysql 3.23.25Oracle Mysql 3.23.31Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 4.0.1Oracle Mysql 4.0.2Symantec Veritas Netbackup Advanced Reporter 4.5 Fp3Symantec Veritas Netbackup Advanced Reporter 4.5 Mp1Symantec Veritas Netbackup Global Data Manager 4.5 Mp1Symantec Veritas Netbackup Global Data Manager 4.5 Mp2Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.37
NA
CVE-2002-1376
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote malicious users to cause a denial of service and possibly execute arbitrary...
Oracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.38Oracle Mysql 3.23.39Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.53Oracle Mysql 3.23.53aOracle Mysql 4.0.5aSymantec Veritas Netbackup Advanced Reporter 3.4Symantec Veritas Netbackup Global Data Manager 4.5Symantec Veritas Netbackup Global Data Manager 4.5 Fp1Oracle Mysql 3.23.2Oracle Mysql 3.23.23Oracle Mysql 3.23.3Oracle Mysql 3.23.30Oracle Mysql 3.23.4Oracle Mysql 3.23.40Oracle Mysql 3.23.48Oracle Mysql 3.23.49
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook