CVE-2002-0969 : Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.0

Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group.

Published 2002-10-11 04:00:00

Updated 2024-01-26 17:19:30

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2002-0969

Oracle » Mysql
Versions before (<) 3.23.50
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A For X86
Oracle » Mysql
Versions from including (>=) 4.0.0 and up to, including, (<=) 4.0.2
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A For X86

Exploit prediction scoring system (EPSS) score for CVE-2002-0969

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 33 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2002-0969

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST	2024-01-26
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2002-0969

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2002-0969

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0004.html

Broken Link;Exploit;Patch;Vendor Advisory
http://www.securityfocus.com/bid/5853

Broken Link;Third Party Advisory;VDB Entry
http://www.iss.net/security_center/static/10243.php

Broken Link;Vendor Advisory
http://www.westpoint.ltd.uk/advisories/wp-02-0003.txt

Broken Link
http://marc.info/?l=bugtraq&m=103358628011935&w=2

'wp-02-0003: MySQL Locally Exploitable Buffer Overflow' - MARC
Mailing List
http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.x

fw_error_www
Broken Link

Jump to

Vulnerability Details : CVE-2002-0969

Products affected by CVE-2002-0969

Exploit prediction scoring system (EPSS) score for CVE-2002-0969

CVSS scores for CVE-2002-0969

CWE ids for CVE-2002-0969

References for CVE-2002-0969