CVE-2002-1375
N/A
Published: September 1, 2004 at 04:00 AM UTC
Updated: June 16, 2026 at 09:59 PM UTC
3 products affected across 2 vendorsMySQL ServerNetbackup Advanced ReporterNetbackup Global Data Manager
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 24%
Description
The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
95%
3.22.263.22.273.22.283.22.293.22.303.22.323.23.103.23.23.23.233.23.243.23.253.23.263.23.273.23.283.23.293.23.33.23.303.23.313.23.343.23.363.23.373.23.383.23.393.23.43.23.403.23.413.23.423.23.433.23.443.23.453.23.463.23.473.23.483.23.493.23.53.23.503.23.513.23.523.23.533.23.53a3.23.83.23.94.0.04.0.14.0.24.0.34.0.5a
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (16)
Vendor Advisoryx_refsource_CONECTIVA
Source: [email protected]
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=103971644013961&w=2Vendor Advisoryx_refsource_GENTOOMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=104004857201968&w=2Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=104005886114500&w=2Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2002/dsa-212Vendor Advisoryx_refsource_ENGARDEPatch
Source: [email protected]
http://www.linuxsecurity.com/advisories/engarde_advisory-2660.htmlVendor Advisoryx_refsource_MANDRAKE
Source: [email protected]
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card