NVD

Id
80329  
Name
CVE-2002-1376  
Description
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2002-12-23  
Modified Date
2017-07-10  
Seq
2002-1376  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
400603 80329 CVE-2002-1376 CLSA-2002:555  View
400604 80329 CVE-2002-1376 20021212 Advisory 04/2002: Multiple MySQL vulnerabilities  View
400605 80329 CVE-2002-1376 20021215 GLSA: mysql  View
400606 80329 CVE-2002-1376 20021216 [OpenPKG-SA-2002.013] OpenPKG Security Advisory (mysql)  View
400607 80329 CVE-2002-1376 20021219 TSLSA-2002-0086 - mysql  View
400608 80329 CVE-2002-1376 http://security.e-matters.de/advisories/042002.html  View
400609 80329 CVE-2002-1376 DSA-212  View
400610 80329 CVE-2002-1376 ESA-20021213-033  View
400611 80329 CVE-2002-1376 MDKSA-2002:087  View
400612 80329 CVE-2002-1376 RHSA-2002:288  View
400613 80329 CVE-2002-1376 6370  View
400614 80329 CVE-2002-1376 6374  View
400615 80329 CVE-2002-1376 mysql-libmysqlclient-readrows-bo(10849)  View
400616 80329 CVE-2002-1376 mysql-libmysqlclient-readonerow-bo(10850)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63992 JVNDB-2002-000319 MySQL の libmysqlclient ライブラリにおけるバッファオーバフローの脆弱性 MySQL に含まれている libmysqlclient ライブラリには、Read_Rows() 関数及び Read_One_Row() 関数において、フィールドサイズに対するチェックが不適切であるため、バッファオーバフローが発生する脆弱性が存在します。 CVE-2002-1376 5760 CVE-2002-1376 80329 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000319.html 2002-12-12 2007-04-01 View