CVSS: 2.6EPSS: 0%CPEs: 4EXPL: 1CVE-2004-0837
https://notcve.org/view.php?id=CVE-2004-0837
MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs. MySQL 4 anteriores a 4.0.21 y 3.x anteriores a 3.23.49 permiten a atacantes causar una denegación de servicio (caída o cuelgue) mediante múltiples hilos de ejecución que alterán simultaneamente UNIONes de tablas MERGE. • http://bugs.mysql.com/2408 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892 http://lists.mysql.com/internals/16168 http://lists.mysql.com/internals/16173 http://lists.mysql.com/internals/16174 http://marc.info/?l=bugtraq&m=110140517515735&w=2 http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c%401.15 http://secunia.com/advisories/12783 http://securitytracker.com/id?1011606 http://sunsolve.sun.com/search/document.do?assetkey=1-26- •
CVSS: 10.0EPSS: 89%CPEs: 1EXPL: 1CVE-2004-0627 – MySQL 4.1/5.0 - Zero-Length Password Authentication Bypass
https://notcve.org/view.php?id=CVE-2004-0627
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string. La función check_scramble_323 de MySQL 4.1x anteriores a 4.1.4, y 5.0, permite a atacantes remotos saltarse la autenticación mediente una cadena revuelta de longitud cero. • https://www.exploit-db.com/exploits/311 http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html http://marc.info/?l=bugtraq&m=108904917528205&w=2 http://www.kb.cert.org/vuls/id/184030 •
CVSS: 10.0EPSS: 4%CPEs: 1EXPL: 0CVE-2004-0628
https://notcve.org/view.php?id=CVE-2004-0628
Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string. Desbordamiento basado en la pila en MySQL 4.1.x anteriores a 4.1.3, y 5.0 permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante una cadena de permutación (scramble). • http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html http://marc.info/?l=bugtraq&m=108904917528205&w=2 http://www.kb.cert.org/vuls/id/645326 https://exchange.xforce.ibmcloud.com/vulnerabilities/16612 •
CVSS: 2.1EPSS: 0%CPEs: 75EXPL: 0CVE-2004-0381
https://notcve.org/view.php?id=CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file. mysqlbug de MySQL pemite a usuarios locales sobreescribir ficheros elgidos arbitrariamente mediante un ataque de enlaces simbólicos sobre el fichero temporal failed-mysql-bugreport • http://marc.info/?l=bugtraq&m=108023246916294&w=2 http://marc.info/?l=bugtraq&m=108206802810402&w=2 http://security.gentoo.org/glsa/glsa-200405-20.xml http://www.ciac.org/ciac/bulletins/p-018.shtml http://www.debian.org/security/2004/dsa-483 http://www.mandriva.com/security/advisories?name=MDKSA-2004:034 http://www.redhat.com/support/errata/RHSA-2004-569.html http://www.redhat.com/support/errata/RHSA-2004-597.html http://www.securityfocus.com/bid/9976 https& •
CVSS: 4.3EPSS: 0%CPEs: 66EXPL: 3CVE-2003-1480 – MySQL 3.x/4.0.x - Weak Password Encryption
https://notcve.org/view.php?id=CVE-2003-1480
MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods. • https://www.exploit-db.com/exploits/22565 http://secunia.com/advisories/8753 http://www.securiteam.com/tools/5WP031FA0U.html http://www.securityfocus.com/bid/7500 • CWE-310: Cryptographic Issues •