Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle mysql 3.23.49 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-0709
MySQL 4.0.23 and previous versions, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
Oracle Mysql 4.0.11Oracle Mysql 4.0.20Oracle Mysql 4.0.21Oracle Mysql 4.0.7Oracle Mysql 4.0.8Oracle Mysql 4.1.2Mysql Mysql 4.1.3Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.18Oracle Mysql 4.0.2Oracle Mysql 4.0.5aOracle Mysql 4.0.6Oracle Mysql 4.1.0Mysql Mysql 4.1.10Oracle Mysql 4.0.12Oracle Mysql 4.0.13Oracle Mysql 4.0.23Oracle Mysql 4.0.3Oracle Mysql 4.0.9Oracle Mysql 4.1.3Oracle Mysql 4.1.4
NA
CVE-2005-0710
MySQL 4.0.23 and previous versions, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_i...
Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.2Oracle Mysql 4.0.20Oracle Mysql 4.0.6Oracle Mysql 4.0.7Oracle Mysql 4.1.0Mysql Mysql 4.1.10Oracle Mysql 3.23.49Oracle Mysql 4.0.0Oracle Mysql 4.0.15Oracle Mysql 4.0.18Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.9Mysql Mysql 4.1.0Oracle Mysql 4.0.11Oracle Mysql 4.0.21Oracle Mysql 4.0.23Oracle Mysql 4.0.8Oracle Mysql 4.1.2Mysql Mysql 4.1.3
NA
CVE-2005-0711
MySQL 4.0.23 and previous versions, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
Oracle Mysql 4.0.0Oracle Mysql 4.0.1Oracle Mysql 4.0.15Oracle Mysql 4.0.18Oracle Mysql 4.0.5Oracle Mysql 4.0.5aMysql Mysql 4.1.0Oracle Mysql 4.1.0Oracle Mysql 3.23.49Oracle Mysql 4.0.13Oracle Mysql 4.0.14Oracle Mysql 4.0.3Oracle Mysql 4.0.4Oracle Mysql 4.0.9Oracle Mysql 4.1.4Oracle Mysql 4.1.5Oracle Mysql 4.0.10Oracle Mysql 4.0.11Oracle Mysql 4.0.2Oracle Mysql 4.0.20Oracle Mysql 4.0.6Oracle Mysql 4.0.7
NA
CVE-2002-1809
The default configuration of the Windows binary release of MySQL 3.23.2 up to and including 3.23.52 has a NULL root password, which could allow remote malicious users to gain unauthorized root access to the MySQL database.
Oracle Mysql 3.23.24Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.41Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.44Oracle Mysql 3.23.45Oracle Mysql 3.23.2Oracle Mysql 3.23.29Oracle Mysql 3.23.30Oracle Mysql 3.23.38Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.48Oracle Mysql 3.23.9Oracle Mysql 3.23.31Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.37Oracle Mysql 3.23.5
NA
CVE-2002-1921
The default configuration of MySQL 3.20.32 up to and including 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote malicious users to connect to the database.
Oracle Mysql 3.20.32aOracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.45Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.48Oracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.2Oracle Mysql 3.23.23Oracle Mysql 3.23.37Oracle Mysql 3.23.38Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.52Oracle Mysql 3.23.8Oracle Mysql 3.23.9Oracle Mysql 3.22.26Oracle Mysql 3.22.28Oracle Mysql 3.22.30
NA
CVE-2002-1923
The default configuration in MySQL 3.20.32 up to and including 3.23.52, when running on Windows, does not have logging enabled, which could allow remote malicious users to conduct activities without detection.
Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.22.26Oracle Mysql 3.22.27Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.3Oracle Mysql 3.23.30Oracle Mysql 3.23.31Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.48Oracle Mysql 3.23.49Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.20.32a
NA
CVE-2002-1373
Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x prior to 3.23.54 allows remote malicious users to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.
Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.37Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.45Oracle Mysql 3.23.52Oracle Mysql 3.23.53Oracle Mysql 4.0.3Oracle Mysql 4.0.5aOracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.53a
NA
CVE-2003-1480
MySQL 3.20 up to and including 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for malicious users to decrypt the password via brute force methods.
Oracle Mysql 3.22Oracle Mysql 3.22.27Oracle Mysql 3.23.10Oracle Mysql 3.23.22Oracle Mysql 3.23.24Oracle Mysql 3.23.28Oracle Mysql 3.23.3Oracle Mysql 3.23.36Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.46Oracle Mysql 3.23.50Oracle Mysql 3.23.52Oracle Mysql 3.23.8Oracle Mysql 4.0.0Oracle Mysql 4.0.8Mysql Mysql 4.1.0Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.31
NA
CVE-2003-0780
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and previous versions, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.32Oracle Mysql 3.23.33Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.23.48Oracle Mysql 3.23.49Oracle Mysql 3.23.54aOracle Mysql 3.23.55Oracle Mysql 4.0.11Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.6Mysql Mysql 4.1.0Oracle Mysql 3.23.2Oracle Mysql 3.23.22Oracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.37Oracle Mysql 3.23.38
NA
CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Oracle Mysql 3.20.32aOracle Mysql 3.23.10Oracle Mysql 3.23.2Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.33Oracle Mysql 3.23.34Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.50Oracle Mysql 3.23.51Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.12Oracle Mysql 4.0.13Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.9Mysql Mysql 4.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook