← Database

CVE-2002-1374

HIGH CVSS: 7.5 Published: 2002-12-23 Modified: 2026-06-16

Description

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.

Affected Platforms

Symantec Veritas Netbackup Advanced ReporterOracle MysqlSymantec Veritas Netbackup Global Data Manager

Weakness Type

NVD-CWE-Other

References