Unscored DSA-212 4 CVEs

mysql - multiple problems

Published Dec 17, 2002 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	mysql	3.23.49-8.2

Vulnerabilities 4

Unscored —

CVE-2002-1373

Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to c…

Sep 1, 2004
Unscored —

CVE-2002-1374 Public exploit EPSS 20%

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileg…

Sep 1, 2004
Unscored —

CVE-2002-1375 Public exploit EPSS 24%

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary…

Sep 1, 2004
Unscored —

CVE-2002-1376

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for cer…

Dec 17, 2002