PT-2002-2291 · Oracle · Mysql Server

Publicado 2002-12-17 · Atualizado 2019-10-07 · CVE-2002-1376

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MySQL versions 3.x through 3.23.54 MySQL versions 4.x through 4.0.6

Description The issue is related to the libmysqlclient client library, which does not properly verify length fields for certain responses in the read rows or read one row routines. This allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Recommendations For MySQL versions 3.x through 3.23.54, update to a version later than 3.23.54 to resolve the issue. For MySQL versions 4.x through 4.0.6, update to a version later than 4.0.6 to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-1376

DSA-212

Produtos afetados

Mysql Server

Referências · 15

• http://security.e-matters.de/advisories/042002.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1376 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=104005886114500&w=2 · Nota
• http://redhat.com/support/errata/RHSA-2002-288.html · Aviso do Fabricante
• http://debian.org/security/2002/dsa-212 · Aviso do Fabricante
• http://securityfocus.com/bid/6370 · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2002:087 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=104004857201968&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10849 · Nota
• http://marc.info/?l=bugtraq&m=104033188706000&w=2 · Nota
• http://marc.info/?l=bugtraq&m=103971644013961&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10850 · Nota
• http://linuxsecurity.com/advisories/engarde_advisory-2660.html · Aviso do Fabricante
• http://securityfocus.com/bid/6374 · Aviso do Fabricante