CVEブラウザに戻る

CVE-2004-0628

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0630%

EPSS Percentile33.43th

Published2004年12月6日

Last Modified2026年4月16日

Vulnerability Description

Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.

Affected Platforms (CPE)

📦

Mysql

Mysql

= 4.1.0

References & Advisories

🔗 http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html

🔗 http://marc.info/?l=bugtraq&m=108904917528205&w=2

🔗 http://www.kb.cert.org/vuls/id/645326

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/16612

🔗 http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html

🔗 http://marc.info/?l=bugtraq&m=108904917528205&w=2

🔗 http://www.kb.cert.org/vuls/id/645326

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/16612

関連する脆弱性情報

CVE-2004-083610.0

Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers t...

CVE-2004-062710.0

The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-...

CVE-2026-4926110.0

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 th...

CVE-2005-068410.0

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (...