Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle mysql 3.23.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2002-1809
The default configuration of the Windows binary release of MySQL 3.23.2 up to and including 3.23.52 has a NULL root password, which could allow remote malicious users to gain unauthorized root access to the MySQL database.
Oracle Mysql 3.23.24Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.41Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.44Oracle Mysql 3.23.45Oracle Mysql 3.23.2Oracle Mysql 3.23.29Oracle Mysql 3.23.30Oracle Mysql 3.23.38Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.48Oracle Mysql 3.23.9Oracle Mysql 3.23.31Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.37Oracle Mysql 3.23.5
NA
CVE-2002-1921
The default configuration of MySQL 3.20.32 up to and including 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote malicious users to connect to the database.
Oracle Mysql 3.20.32aOracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.45Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.48Oracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.2Oracle Mysql 3.23.23Oracle Mysql 3.23.37Oracle Mysql 3.23.38Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.52Oracle Mysql 3.23.8Oracle Mysql 3.23.9Oracle Mysql 3.22.26Oracle Mysql 3.22.28Oracle Mysql 3.22.30
NA
CVE-2002-1923
The default configuration in MySQL 3.20.32 up to and including 3.23.52, when running on Windows, does not have logging enabled, which could allow remote malicious users to conduct activities without detection.
Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.22.26Oracle Mysql 3.22.27Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.3Oracle Mysql 3.23.30Oracle Mysql 3.23.31Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.48Oracle Mysql 3.23.49Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.20.32a
NA
CVE-2002-1373
Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x prior to 3.23.54 allows remote malicious users to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.
Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.37Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.45Oracle Mysql 3.23.52Oracle Mysql 3.23.53Oracle Mysql 4.0.3Oracle Mysql 4.0.5aOracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.53a
NA
CVE-2003-1480
MySQL 3.20 up to and including 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for malicious users to decrypt the password via brute force methods.
Oracle Mysql 3.22Oracle Mysql 3.22.27Oracle Mysql 3.23.10Oracle Mysql 3.23.22Oracle Mysql 3.23.24Oracle Mysql 3.23.28Oracle Mysql 3.23.3Oracle Mysql 3.23.36Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.46Oracle Mysql 3.23.50Oracle Mysql 3.23.52Oracle Mysql 3.23.8Oracle Mysql 4.0.0Oracle Mysql 4.0.8Mysql Mysql 4.1.0Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.31
NA
CVE-2003-0780
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and previous versions, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.32Oracle Mysql 3.23.33Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.23.48Oracle Mysql 3.23.49Oracle Mysql 3.23.54aOracle Mysql 3.23.55Oracle Mysql 4.0.11Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.6Mysql Mysql 4.1.0Oracle Mysql 3.23.2Oracle Mysql 3.23.22Oracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.37Oracle Mysql 3.23.38
NA
CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Oracle Mysql 3.20.32aOracle Mysql 3.23.10Oracle Mysql 3.23.2Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.33Oracle Mysql 3.23.34Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.50Oracle Mysql 3.23.51Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.12Oracle Mysql 4.0.13Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.9Mysql Mysql 4.1.0
NA
CVE-2004-0957
Unknown vulnerability in MySQL 3.23.58 and previous versions, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activitie...
Oracle Mysql 3.21Oracle Mysql 3.22Oracle Mysql 3.23Oracle Mysql 3.23.10Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.20Oracle Mysql 4.0.3Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.3
NA
CVE-2006-0903
MySQL 5.0.18 and previous versions allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vend...
Mysql Mysql 5.0.5Mysql Mysql 5.0.10Mysql Mysql 5.0.15Mysql Mysql 5.0.17Mysql Mysql 4.1.13Mysql Mysql 4.1.15Mysql Mysql 4.1.8Mysql Mysql 4.1.14Mysql Mysql 4.1.12Mysql Mysql 4.1.10Mysql Mysql 5.0.2Mysql Mysql 5.0.1Mysql Mysql 4.1.0Mysql Mysql 5.0.4Mysql Mysql 4.1.3Mysql Mysql 5.0.16Oracle Mysql 3.23Oracle Mysql 3.23.0Oracle Mysql 3.23.1Oracle Mysql 3.23.2Oracle Mysql 3.23.3Oracle Mysql 3.23.4
NA
CVE-2006-4031
MySQL 4.1 prior to 4.1.21 and 5.0 prior to 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.14Oracle Mysql 3.23.15Oracle Mysql 3.23.21Oracle Mysql 3.23.22Oracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.36Oracle Mysql 3.23.37Oracle Mysql 3.23.43Oracle Mysql 3.23.44Oracle Mysql 3.23.51Oracle Mysql 3.23.52Oracle Mysql 3.23.57Oracle Mysql 3.23.58Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.17Oracle Mysql 4.0.18Oracle Mysql 4.0.25
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook