Description

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Remediation

References

CVE-2002-1376

Related Vulnerabilities

CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9440)

WordPress Plugin Fuctweb CapCC 'plugins.php' SQL Injection (1.0)

Jenkins Missing Authorization Vulnerability (CVE-2021-21685)

MySQL Other Vulnerability (CVE-2009-4019)

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker SQL Injection (9.0.1)

Severity

High

Classification

CVE-2002-1376

Tags

Missing Update Known Vulnerabilities