CVE-2002-1374 PUBLISHED CVSS 7.5 HIGH

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.

EPSS 25.36% · 96.2th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
25.36%
96.2th percentile

Affected Products

VendorProductVersions
n/an/an/a
oraclemysql3.22.26, 3.22.27, 3.22.28
symantec_veritasnetbackup_global_data_manager4.5, 4.5_fp1, 4.5_fp2
symantec_veritasnetbackup_advanced_reporter3.4, 4.5_mp3, 4.5

Timeline

References

Open in Interactive Console →