Executive Summary

Informations
Name CVE-2003-0073 First vendor Publication 2003-02-19
Vendor Cve Last vendor Modification 2019-10-07

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score 5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0073

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:436
 
Oval ID: oval:org.mitre.oval:def:436
Title: MYSQLd Double-free Vulnerability
Description: Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.
Family: unix Class: vulnerability
Reference(s): CVE-2003-0073
 Version: 4
Platform(s): Red Hat Linux 9
 Product(s): MySQL
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8

OpenVAS Exploits

Date Description
2008-01-17 Name : Debian Security Advisory DSA 303-1 (mysql)
File : nvt/deb_303_1.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
9910 MySQL mysql_change_user() Double-free Memory Pointer DoS

Nessus® Vulnerability Scanner

Date Description
2004-09-29 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-303.nasl - Type : ACT_GATHER_INFO
2004-07-31 Name : The remote Mandrake Linux host is missing one or more security updates.
File : mandrake_MDKSA-2003-013.nasl - Type : ACT_GATHER_INFO
2004-07-06 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2003-094.nasl - Type : ACT_GATHER_INFO
2003-03-01 Name : The remote database service is prone to a denial of service attack.
File : mysql_double_free.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/6718
BUGTRAQ http://marc.info/?l=bugtraq&m=104385719107879&w=2
CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743
CONFIRM http://www.mysql.com/doc/en/News-3.23.55.html
DEBIAN http://www.debian.org/security/2003/dsa-303
ENGARDE http://www.linuxsecurity.com/advisories/engarde_advisory-2873.html
MANDRAKE http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:013
OVAL https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT http://www.redhat.com/support/errata/RHSA-2003-093.html
http://www.redhat.com/support/errata/RHSA-2003-094.html
http://www.redhat.com/support/errata/RHSA-2003-166.html
XF http://www.iss.net/security_center/static/11199.php

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2021-05-04 12:01:57
  • Multiple Updates
2021-04-22 01:02:06
  • Multiple Updates
2020-05-23 00:15:20
  • Multiple Updates
2019-10-08 17:19:37
  • Multiple Updates
2017-10-10 09:23:25
  • Multiple Updates
2016-10-18 12:01:08
  • Multiple Updates
2016-04-26 12:29:57
  • Multiple Updates
2014-02-17 10:25:47
  • Multiple Updates
2013-05-11 11:50:26
  • Multiple Updates