CVE-2002-0969

Description

Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long datadir parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.103

Associated Vulnerability

Vulnerability	OS Platform
Update MySQL to 3.23.52	Windows
Update MySQL to 4.0.3	Windows
Update MySQL to 3.23.52 (For Linux)	Linux
Update MySQL to 4.0.3 (For Linux)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234