PT-2002-2291 · Oracle · Mysql Server

Published 2002-12-17 · Updated 2019-10-07 · CVE-2002-1376

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MySQL versions 3.x through 3.23.54 MySQL versions 4.x through 4.0.6

Description The issue is related to the libmysqlclient client library, which does not properly verify length fields for certain responses in the read rows or read one row routines. This allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Recommendations For MySQL versions 3.x through 3.23.54, update to a version later than 3.23.54 to resolve the issue. For MySQL versions 4.x through 4.0.6, update to a version later than 4.0.6 to resolve the issue.

Fix

Related Identifiers

CVE-2002-1376

DSA-212

Affected Products

Mysql Server

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2002-1376 · Security Note
• http://redhat.com/support/errata/RHSA-2002-288.html · Vendor Advisory
• http://debian.org/security/2002/dsa-212 · Vendor Advisory
• http://securityfocus.com/bid/6370 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2002:087 · Vendor Advisory
• http://linuxsecurity.com/advisories/engarde_advisory-2660.html · Vendor Advisory
• http://securityfocus.com/bid/6374 · Vendor Advisory
• http://security.e-matters.de/advisories/042002.html · Note
• http://marc.info/?l=bugtraq&m=104005886114500&w=2 · Note
• http://marc.info/?l=bugtraq&m=104004857201968&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10849 · Note
• http://marc.info/?l=bugtraq&m=104033188706000&w=2 · Note
• http://marc.info/?l=bugtraq&m=103971644013961&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10850 · Note