CVE-2002-1374
No CVSS score yet. EPSS 20% chance of exploitation in the next 30 days.
The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.
- EPSS
- 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- oracle:mysql
- symantec_veritas:netbackup_advanced_reporter
- symantec_veritas:netbackup_global_data_manager