CVE-2002-1376: High severity symantec veritas netbackup global data manager vulnerability
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) readrows or (2) readonerow routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1376?
CVE-2002-1376 is classified as a medium severity vulnerability due to its potential to cause denial of service and possibly allow remote code execution.
How do I fix CVE-2002-1376?
To fix CVE-2002-1376, upgrade to a version of MySQL that is 4.0.7 or later.
What systems are affected by CVE-2002-1376?
CVE-2002-1376 affects MySQL versions 3.x up to 3.23.54 and 4.x up to 4.0.6.
What are the implications of exploiting CVE-2002-1376?
Exploiting CVE-2002-1376 could allow remote attackers to crash the MySQL service or potentially execute arbitrary code.
Is there a workaround for CVE-2002-1376?
A temporary workaround for CVE-2002-1376 is to restrict access to the MySQL server from untrusted networks until the upgrade is performed.