CVE-2002-0969: Buffer Overflow
Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0969?
CVE-2002-0969 is categorized as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2002-0969?
To fix CVE-2002-0969, upgrade MySQL to version 3.23.50 or later, or to version 4.0.2 or later.
Who is affected by CVE-2002-0969?
CVE-2002-0969 affects MySQL daemon versions prior to 3.23.50 and 4.0 beta versions before 4.0.2 running on Windows.
What causes the vulnerability in CVE-2002-0969?
The vulnerability in CVE-2002-0969 is caused by a buffer overflow in the MySQL daemon due to a long 'datadir' parameter.
Can CVE-2002-0969 lead to security breaches?
Yes, CVE-2002-0969 can allow local users to execute arbitrary code, leading to significant security breaches.