CVE-2002-1375 PUBLISHED CVSS 7.5 HIGH

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.

EPSS 15.03% · 94.5th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
15.03%
94.5th percentile

Affected Products

VendorProductVersions
oraclemysql3.23.23, 3.22.26, 3.22.27
symantec_veritasnetbackup_global_data_manager4.5, 4.5_mp1, 4.5_mp2
n/an/an/a
symantec_veritasnetbackup_advanced_reporter4.5_fp3, 4.5_mp1, 4.5_mp2

Timeline

References

Open in Interactive Console →