Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle mysql 3.23.54 vulnerabilities and exploits

(subscribe to this query)
910
VMScore
CVE-2003-0780
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and previous versions, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Oracle Mysql 3.23.25Oracle Mysql 3.23.26Oracle Mysql 3.23.32Oracle Mysql 3.23.33Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.23.48Oracle Mysql 3.23.49Oracle Mysql 3.23.54aOracle Mysql 3.23.55Oracle Mysql 4.0.11Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.6Mysql Mysql 4.1.0Oracle Mysql 3.23.2Oracle Mysql 3.23.22Oracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.37Oracle Mysql 3.23.38
905
VMScore
CVE-2003-0150
MySQL 3.23.55 and previous versions creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my....
Oracle Mysql 3.23.53aOracle Mysql 3.23.54Oracle Mysql 3.23.54aOracle Mysql 3.23.55Oracle Mysql 3.23.52Oracle Mysql 3.23.53
755
VMScore
CVE-2002-1374
The COM_CHANGE_USER command in MySQL 3.x prior to 3.23.54, and 4.x prior to 4.0.6, allows remote malicious users to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the...
Oracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.53aOracle Mysql 3.23.8Symantec Veritas Netbackup Advanced Reporter 3.4Symantec Veritas Netbackup Advanced Reporter 4.5Symantec Veritas Netbackup Global Data Manager 4.5Symantec Veritas Netbackup Global Data Manager 4.5 Fp1Oracle Mysql 3.22.26Oracle Mysql 3.23.2Oracle Mysql 3.23.23Oracle Mysql 3.23.30Oracle Mysql 3.23.31Oracle Mysql 3.23.40Oracle Mysql 3.23.41Oracle Mysql 3.23.48
755
VMScore
CVE-2002-1375
The COM_CHANGE_USER command in MySQL 3.x prior to 3.23.54, and 4.x to 4.0.6, allows remote malicious users to execute arbitrary code via a long response.
Oracle Mysql 3.22.27Oracle Mysql 3.22.28Oracle Mysql 3.23.24Oracle Mysql 3.23.25Oracle Mysql 3.23.31Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 4.0.1Oracle Mysql 4.0.2Symantec Veritas Netbackup Advanced Reporter 4.5 Fp3Symantec Veritas Netbackup Advanced Reporter 4.5 Mp1Symantec Veritas Netbackup Global Data Manager 4.5 Mp1Symantec Veritas Netbackup Global Data Manager 4.5 Mp2Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.37
668
VMScore
CVE-2002-1376
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote malicious users to cause a denial of service and possibly execute arbitrary...
Oracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.28Oracle Mysql 3.23.29Oracle Mysql 3.23.38Oracle Mysql 3.23.39Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.53Oracle Mysql 3.23.53aOracle Mysql 4.0.5aSymantec Veritas Netbackup Advanced Reporter 3.4Symantec Veritas Netbackup Global Data Manager 4.5Symantec Veritas Netbackup Global Data Manager 4.5 Fp1Oracle Mysql 3.23.2Oracle Mysql 3.23.23Oracle Mysql 3.23.3Oracle Mysql 3.23.30Oracle Mysql 3.23.4Oracle Mysql 3.23.40Oracle Mysql 3.23.48Oracle Mysql 3.23.49
605
VMScore
CVE-2004-0957
Unknown vulnerability in MySQL 3.23.58 and previous versions, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activitie...
Oracle Mysql 3.21Oracle Mysql 3.22Oracle Mysql 3.23Oracle Mysql 3.23.10Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.20Oracle Mysql 4.0.3Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.3
465
VMScore
CVE-2006-0903
MySQL 5.0.18 and previous versions allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vend...
Mysql Mysql 5.0.5Mysql Mysql 5.0.10Mysql Mysql 5.0.15Mysql Mysql 5.0.17Mysql Mysql 4.1.13Mysql Mysql 4.1.15Mysql Mysql 4.1.8Mysql Mysql 4.1.14Mysql Mysql 4.1.12Mysql Mysql 4.1.10Mysql Mysql 5.0.2Mysql Mysql 5.0.1Mysql Mysql 4.1.0Mysql Mysql 5.0.4Mysql Mysql 4.1.3Mysql Mysql 5.0.16Oracle Mysql 3.23Oracle Mysql 3.23.0Oracle Mysql 3.23.1Oracle Mysql 3.23.2Oracle Mysql 3.23.3Oracle Mysql 3.23.4
445
VMScore
CVE-2003-0073
Double-free vulnerability in mysqld for MySQL prior to 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.
Oracle Mysql 3.23.31Oracle Mysql 3.23.54aOracle Mysql 3.23.36Oracle Mysql 3.23.41Oracle Mysql 3.23.53Oracle Mysql 3.23.54Oracle Mysql 3.23.47Oracle Mysql 3.23.52
445
VMScore
CVE-2002-1373
Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x prior to 3.23.54 allows remote malicious users to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.
Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.23.26Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.37Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.45Oracle Mysql 3.23.52Oracle Mysql 3.23.53Oracle Mysql 4.0.3Oracle Mysql 4.0.5aOracle Mysql 3.22.32Oracle Mysql 3.23.10Oracle Mysql 3.23.29Oracle Mysql 3.23.3Oracle Mysql 3.23.39Oracle Mysql 3.23.4Oracle Mysql 3.23.46Oracle Mysql 3.23.47Oracle Mysql 3.23.53a
435
VMScore
CVE-2003-1480
MySQL 3.20 up to and including 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for malicious users to decrypt the password via brute force methods.
Oracle Mysql 3.22Oracle Mysql 3.22.27Oracle Mysql 3.23.10Oracle Mysql 3.23.22Oracle Mysql 3.23.24Oracle Mysql 3.23.28Oracle Mysql 3.23.3Oracle Mysql 3.23.36Oracle Mysql 3.23.38Oracle Mysql 3.23.44Oracle Mysql 3.23.46Oracle Mysql 3.23.50Oracle Mysql 3.23.52Oracle Mysql 3.23.8Oracle Mysql 4.0.0Oracle Mysql 4.0.8Mysql Mysql 4.1.0Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.22.30Oracle Mysql 3.22.32Oracle Mysql 3.23.31
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4651CVE-2024-34255elevation of privilegeCVE-2024-25529CVE-2024-4671NULL pointer dereferenceCVE-2024-25527template injectionCVE-2008-0166
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook