Description

Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group.

Remediation

References

CVE-2002-0969

Related Vulnerabilities

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.12)

MySQL CVE-2012-1703 Vulnerability (CVE-2012-1703)

Oracle JRE CVE-2013-5848 Vulnerability (CVE-2013-5848)

WordPress Plugin W3 Total Cache Multiple Vulnerabilities (0.9.4)

MySQL CVE-2018-2779 Vulnerability (CVE-2018-2779)

Severity

Medium

Classification

CVE-2002-0969

Tags

Missing Update Known Vulnerabilities