| ID |
CVE-2003-0073
|
| Summary |
Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:mysql:3.23.54a:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql:3.23.54a:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.0 (as of 07-10-2019 - 16:41) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| oval
via4
|
| accepted | 2010-09-20T04:00:25.288-04:00 | | class | vulnerability | | contributors | | name | Jay Beale | | organization | Bastille Linux |
| name | Jay Beale | | organization | Bastille Linux |
| name | Thomas R. Jones | | organization | Maitreya Security |
| name | Jonathan Baker | | organization | The MITRE Corporation |
| | description | Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user. | | family | unix | | id | oval:org.mitre.oval:def:436 | | status | accepted | | submitted | 2003-08-18T12:00:00.000-04:00 | | title | MYSQLd Double-free Vulnerability | | version | 41 |
|
| redhat
via4
|
|
| refmap
via4
|
| bid | 6718 | | bugtraq | 20030129 [OpenPKG-SA-2003.008] OpenPKG Security Advisory (mysql) | | conectiva | CLA-2003:743 | | confirm | http://www.mysql.com/doc/en/News-3.23.55.html | | debian | DSA-303 | | engarde | ESA-20030220-004 | | mandrake | MDKSA-2003:013 | | xf | mysql-mysqlchangeuser-doublefree-dos(11199) |
|
| Last major update |
07-10-2019 - 16:41 |
| Published |
19-02-2003 - 05:00 |
| Last modified |
07-10-2019 - 16:41 |
