libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2002-12-22 21:00
Updated : 2019-10-07 09:41
NVD link : CVE-2002-1376
Mitre link : CVE-2002-1376
JSON object : View
CWE
Products Affected
oracle
- mysql
symantec_veritas
- netbackup_global_data_manager
- netbackup_advanced_reporter