CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-1374

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.254

EPSS Ranking 95.9%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2002-1374

Oracle » Mysql » Version: 3.22.26

cpe:2.3:a:oracle:mysql:3.22.26
Oracle » Mysql » Version: 3.22.27

cpe:2.3:a:oracle:mysql:3.22.27
Oracle » Mysql » Version: 3.22.28

cpe:2.3:a:oracle:mysql:3.22.28
Oracle » Mysql » Version: 3.22.29

cpe:2.3:a:oracle:mysql:3.22.29
Oracle » Mysql » Version: 3.22.30

cpe:2.3:a:oracle:mysql:3.22.30
Oracle » Mysql » Version: 3.22.32

cpe:2.3:a:oracle:mysql:3.22.32
Oracle » Mysql » Version: 3.23.10

cpe:2.3:a:oracle:mysql:3.23.10
Oracle » Mysql » Version: 3.23.2

cpe:2.3:a:oracle:mysql:3.23.2
Oracle » Mysql » Version: 3.23.23

cpe:2.3:a:oracle:mysql:3.23.23
Oracle » Mysql » Version: 3.23.24

cpe:2.3:a:oracle:mysql:3.23.24
Oracle » Mysql » Version: 3.23.25

cpe:2.3:a:oracle:mysql:3.23.25
Oracle » Mysql » Version: 3.23.26

cpe:2.3:a:oracle:mysql:3.23.26
Oracle » Mysql » Version: 3.23.27

cpe:2.3:a:oracle:mysql:3.23.27
Oracle » Mysql » Version: 3.23.28

cpe:2.3:a:oracle:mysql:3.23.28
Oracle » Mysql » Version: 3.23.29

cpe:2.3:a:oracle:mysql:3.23.29
Oracle » Mysql » Version: 3.23.3

cpe:2.3:a:oracle:mysql:3.23.3
Oracle » Mysql » Version: 3.23.30

cpe:2.3:a:oracle:mysql:3.23.30
Oracle » Mysql » Version: 3.23.31

cpe:2.3:a:oracle:mysql:3.23.31
Oracle » Mysql » Version: 3.23.34

cpe:2.3:a:oracle:mysql:3.23.34
Oracle » Mysql » Version: 3.23.36

cpe:2.3:a:oracle:mysql:3.23.36
Oracle » Mysql » Version: 3.23.37

cpe:2.3:a:oracle:mysql:3.23.37
Oracle » Mysql » Version: 3.23.38

cpe:2.3:a:oracle:mysql:3.23.38
Oracle » Mysql » Version: 3.23.39

cpe:2.3:a:oracle:mysql:3.23.39
Oracle » Mysql » Version: 3.23.4

cpe:2.3:a:oracle:mysql:3.23.4
Oracle » Mysql » Version: 3.23.40

cpe:2.3:a:oracle:mysql:3.23.40
Oracle » Mysql » Version: 3.23.41

cpe:2.3:a:oracle:mysql:3.23.41
Oracle » Mysql » Version: 3.23.42

cpe:2.3:a:oracle:mysql:3.23.42
Oracle » Mysql » Version: 3.23.43

cpe:2.3:a:oracle:mysql:3.23.43
Oracle » Mysql » Version: 3.23.44

cpe:2.3:a:oracle:mysql:3.23.44
Oracle » Mysql » Version: 3.23.45

cpe:2.3:a:oracle:mysql:3.23.45
Oracle » Mysql » Version: 3.23.46

cpe:2.3:a:oracle:mysql:3.23.46
Oracle » Mysql » Version: 3.23.47

cpe:2.3:a:oracle:mysql:3.23.47
Oracle » Mysql » Version: 3.23.48

cpe:2.3:a:oracle:mysql:3.23.48
Oracle » Mysql » Version: 3.23.49

cpe:2.3:a:oracle:mysql:3.23.49
Oracle » Mysql » Version: 3.23.5

cpe:2.3:a:oracle:mysql:3.23.5
Oracle » Mysql » Version: 3.23.50

cpe:2.3:a:oracle:mysql:3.23.50
Oracle » Mysql » Version: 3.23.51

cpe:2.3:a:oracle:mysql:3.23.51
Oracle » Mysql » Version: 3.23.52

cpe:2.3:a:oracle:mysql:3.23.52
Oracle » Mysql » Version: 3.23.53

cpe:2.3:a:oracle:mysql:3.23.53
Oracle » Mysql » Version: 3.23.53a

cpe:2.3:a:oracle:mysql:3.23.53a
Oracle » Mysql » Version: 3.23.8

cpe:2.3:a:oracle:mysql:3.23.8
Oracle » Mysql » Version: 3.23.9

cpe:2.3:a:oracle:mysql:3.23.9
Oracle » Mysql » Version: 4.0.0

cpe:2.3:a:oracle:mysql:4.0.0
Oracle » Mysql » Version: 4.0.1

cpe:2.3:a:oracle:mysql:4.0.1
Oracle » Mysql » Version: 4.0.2

cpe:2.3:a:oracle:mysql:4.0.2
Oracle » Mysql » Version: 4.0.3

cpe:2.3:a:oracle:mysql:4.0.3
Oracle » Mysql » Version: 4.0.5a

cpe:2.3:a:oracle:mysql:4.0.5a
Symantec Veritas » Netbackup Advanced Reporter » Version: 3.4

cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:3.4
Symantec Veritas » Netbackup Advanced Reporter » Version: 4.5

cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5
Symantec Veritas » Netbackup Advanced Reporter » Version: 4.5_fp1

cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1
Symantec Veritas » Netbackup Advanced Reporter » Version: 4.5_fp2

cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2
Symantec Veritas » Netbackup Advanced Reporter » Version: 4.5_fp3

cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3
Symantec Veritas » Netbackup Advanced Reporter » Version: 4.5_mp1

cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1
Symantec Veritas » Netbackup Advanced Reporter » Version: 4.5_mp2

cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2
Symantec Veritas » Netbackup Advanced Reporter » Version: 4.5_mp3

cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3
Symantec Veritas » Netbackup Global Data Manager » Version: 4.5

cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5
Symantec Veritas » Netbackup Global Data Manager » Version: 4.5_fp1

cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp1
Symantec Veritas » Netbackup Global Data Manager » Version: 4.5_fp2

cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp2
Symantec Veritas » Netbackup Global Data Manager » Version: 4.5_fp3

cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp3
Symantec Veritas » Netbackup Global Data Manager » Version: 4.5_mp1

cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp1
Symantec Veritas » Netbackup Global Data Manager » Version: 4.5_mp2

cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp2
Symantec Veritas » Netbackup Global Data Manager » Version: 4.5_mp3

cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-1374

Products

Pricing

Contact Us