CVE-2002-1376
N/A
Published: December 17, 2002 at 05:00 AM UTC
Updated: June 16, 2026 at 09:59 PM UTC
3 products affected across 2 vendorsMySQL ServerNetbackup Advanced ReporterNetbackup Global Data Manager
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 7%
Description
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
95%
3.22.263.22.273.22.283.22.293.22.303.22.323.23.103.23.23.23.233.23.243.23.253.23.263.23.273.23.283.23.293.23.33.23.303.23.313.23.343.23.363.23.373.23.383.23.393.23.43.23.403.23.413.23.423.23.433.23.443.23.453.23.463.23.473.23.483.23.493.23.53.23.503.23.513.23.523.23.533.23.53a3.23.83.23.94.0.04.0.14.0.24.0.34.0.5a
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (14)
Vendor Advisoryx_refsource_CONECTIVA
Source: [email protected]
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=103971644013961&w=2Vendor Advisoryx_refsource_GENTOOMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=104004857201968&w=2Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=104005886114500&w=2Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=104033188706000&w=2Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2002/dsa-212Vendor Advisoryx_refsource_ENGARDEPatch
Source: [email protected]
http://www.linuxsecurity.com/advisories/engarde_advisory-2660.htmlQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card