Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle mysql 3.23.52 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2003-0150
MySQL 3.23.55 and previous versions creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my....
Oracle Mysql 3.23.53aOracle Mysql 3.23.54Oracle Mysql 3.23.54aOracle Mysql 3.23.55Oracle Mysql 3.23.52Oracle Mysql 3.23.53
NA
CVE-2003-0073
Double-free vulnerability in mysqld for MySQL prior to 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.
Oracle Mysql 3.23.31Oracle Mysql 3.23.54aOracle Mysql 3.23.36Oracle Mysql 3.23.41Oracle Mysql 3.23.53Oracle Mysql 3.23.54Oracle Mysql 3.23.47Oracle Mysql 3.23.52
NA
CVE-2002-1809
The default configuration of the Windows binary release of MySQL 3.23.2 up to and including 3.23.52 has a NULL root password, which could allow remote malicious users to gain unauthorized root access to the MySQL database.
Oracle Mysql 3.23.24Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.41Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.44Oracle Mysql 3.23.45Oracle Mysql 3.23.2Oracle Mysql 3.23.29Oracle Mysql 3.23.30Oracle Mysql 3.23.38Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.48Oracle Mysql 3.23.9Oracle Mysql 3.23.31Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.37Oracle Mysql 3.23.5
NA
CVE-2002-1921
The default configuration of MySQL 3.20.32 up to and including 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote malicious users to connect to the database.
Oracle Mysql 3.20.32aOracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.45Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.48Oracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.2Oracle Mysql 3.23.23Oracle Mysql 3.23.37Oracle Mysql 3.23.38Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.52Oracle Mysql 3.23.8Oracle Mysql 3.23.9Oracle Mysql 3.22.26Oracle Mysql 3.22.28Oracle Mysql 3.22.30
NA
CVE-2002-1923
The default configuration in MySQL 3.20.32 up to and including 3.23.52, when running on Windows, does not have logging enabled, which could allow remote malicious users to conduct activities without detection.
Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.22.26Oracle Mysql 3.22.27Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.3Oracle Mysql 3.23.30Oracle Mysql 3.23.31Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.48Oracle Mysql 3.23.49Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.20.32a
NA
CVE-2002-1373
Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x prior to 3.23.54 allows remote malicious users to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.
Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.37Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.45Oracle Mysql 3.23.52Oracle Mysql 3.23.53Oracle Mysql 4.0.3Oracle Mysql 4.0.5aOracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.53a
NA
CVE-2003-1480
MySQL 3.20 up to and including 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for malicious users to decrypt the password via brute force methods.
Oracle Mysql 3.22Oracle Mysql 3.22.27Oracle Mysql 3.23.10Oracle Mysql 3.23.22Oracle Mysql 3.23.24Oracle Mysql 3.23.28Oracle Mysql 3.23.3Oracle Mysql 3.23.36Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.46Oracle Mysql 3.23.50Oracle Mysql 3.23.52Oracle Mysql 3.23.8Oracle Mysql 4.0.0Oracle Mysql 4.0.8Mysql Mysql 4.1.0Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.31
NA
CVE-2003-0780
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and previous versions, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.32Oracle Mysql 3.23.33Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.23.48Oracle Mysql 3.23.49Oracle Mysql 3.23.54aOracle Mysql 3.23.55Oracle Mysql 4.0.11Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.6Mysql Mysql 4.1.0Oracle Mysql 3.23.2Oracle Mysql 3.23.22Oracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.37Oracle Mysql 3.23.38
NA
CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Oracle Mysql 3.20.32aOracle Mysql 3.23.10Oracle Mysql 3.23.2Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.33Oracle Mysql 3.23.34Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.50Oracle Mysql 3.23.51Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.12Oracle Mysql 4.0.13Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.9Mysql Mysql 4.1.0
NA
CVE-2004-0957
Unknown vulnerability in MySQL 3.23.58 and previous versions, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activitie...
Oracle Mysql 3.21Oracle Mysql 3.22Oracle Mysql 3.23Oracle Mysql 3.23.10Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.20Oracle Mysql 4.0.3Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook