CVE-2004-0628: Buffer Overflow
Published Jul 8, 2004
·Updated
Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.
Affected Software
1 affected component
MySQL mysql=4.1.0
Remediation
Patch Available
Event History
Jul 8, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0628?
CVE-2004-0628 has a high severity rating due to its potential for remote code execution and denial of service.
2
How do I fix CVE-2004-0628?
To fix CVE-2004-0628, upgrade to MySQL version 4.1.3 or higher, or 5.0 or higher.
3
What products are affected by CVE-2004-0628?
CVE-2004-0628 affects MySQL versions 4.1.x prior to 4.1.3 and version 5.0.
4
What type of attack can be launched using CVE-2004-0628?
CVE-2004-0628 can be exploited by remote attackers to crash the MySQL server or potentially execute arbitrary code.
5
Is there a workaround for CVE-2004-0628?
There are no effective workarounds for CVE-2004-0628, so upgrading to a secure version is strongly recommended.