Description

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Remediation

References

CVE-2002-1376

Related Vulnerabilities

Apache Tomcat Other Vulnerability (CVE-2003-0866)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (1.2.3)

PostgreSQL Numeric Errors Vulnerability (CVE-2010-0442)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2643)

WordPress Plugin Advanced XML Reader XML External Entity Information Disclosure (0.3.4)

Severity

High

Classification

CVE-2002-1376

Tags

Missing Update Known Vulnerabilities