CVE-2002-0969

Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group.

• CWE-120

• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0004.htmlBroken Link, Exploit, Patch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=103358628011935&w=2Mailing List
• http://www.iss.net/security_center/static/10243.phpBroken Link, Vendor Advisory
• http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.xBroken Link
• http://www.securityfocus.com/bid/5853Broken Link, Third Party Advisory, VDB Entry
• http://www.westpoint.ltd.uk/advisories/wp-02-0003.txtBroken Link
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0004.htmlBroken Link, Exploit, Patch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=103358628011935&w=2Mailing List
• http://www.iss.net/security_center/static/10243.phpBroken Link, Vendor Advisory
• http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.xBroken Link
• http://www.securityfocus.com/bid/5853Broken Link, Third Party Advisory, VDB Entry
• http://www.westpoint.ltd.uk/advisories/wp-02-0003.txtBroken Link

Published

Oct 11, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0963SQL injection vulnerability in comment.php for GeekLog 1.3.5…
• CVE-2002-0964Half-Life Server 1.1.1.0 and earlier allows remote attackers…
• CVE-2002-0965Buffer overflow in TNS Listener for Oracle 9i Database Serve…
• CVE-2002-0966Buffer overflow in 4D web server 6.7.3 allow remote attacker…
• CVE-2002-0967Buffer overflow in eDonkey 2000 35.16.60 and earlier allows …
• CVE-2002-0968Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier…
• CVE-2002-0970The SSL capability for Konqueror in KDE 3.0.2 and earlier do…
• CVE-2002-0971Vulnerability in VNC, TightVNC, and TridiaVNC allows local u…
• CVE-2002-0972Buffer overflows in PostgreSQL 7.2 allow attackers to cause …
• CVE-2002-0973Integer signedness error in several system calls for FreeBSD…
• CVE-2002-0974Help and Support Center for Windows XP allows remote attacke…
• CVE-2002-0975Buffer overflow in Microsoft DirectX Files Viewer ActiveX co…