Vulnerability-Lookup

CVE-2007-3780 (GCVE-0-2007-3780)

Vulnerability from cvelistv5 – Published: 2007-07-15 22:00 – Updated: 2024-08-07 14:28

Summary

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2320 records in the last 180 days details

References

27 references

URL	Tags
http://bugs.mysql.com/bug.php?id=28984	x_refsource_MISC
http://secunia.com/advisories/26710	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27823	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-08…	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.securitytracker.com/id?1018629	vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2007-08…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26073	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26621	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26498	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/36732	vdb-entryx_refsource_OSVDB
http://lists.mysql.com/announce/470	mailing-listx_refsource_MLIST
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html	x_refsource_CONFIRM
http://www.securityfocus.com/bid/25017	vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/473874/100…	mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2008/1000…	vdb-entryx_refsource_VUPEN
http://security.gentoo.org/glsa/glsa-200708-10.xml	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/26987	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25301	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1413	vendor-advisoryx_refsource_DEBIAN
https://issues.rpath.com/browse/RPL-1536	x_refsource_CONFIRM
https://usn.ubuntu.com/528-1/	vendor-advisoryx_refsource_UBUNTU
http://dev.mysql.com/doc/refman/5.0/en/releasenot…	x_refsource_CONFIRM
http://secunia.com/advisories/27155	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26430	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL

Date Public

2007-07-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.467Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.mysql.com/bug.php?id=28984"
          },
          {
            "name": "26710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26710"
          },
          {
            "name": "27823",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27823"
          },
          {
            "name": "RHSA-2007:0875",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
          },
          {
            "name": "MDKSA-2007:177",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
          },
          {
            "name": "SUSE-SR:2007:019",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
          },
          {
            "name": "1018629",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018629"
          },
          {
            "name": "RHSA-2007:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
          },
          {
            "name": "26073",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26073"
          },
          {
            "name": "26621",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26621"
          },
          {
            "name": "26498",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26498"
          },
          {
            "name": "36732",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/36732"
          },
          {
            "name": "[announce] 20070712 MySQL Community Server 5.0.45 has been released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.mysql.com/announce/470"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
          },
          {
            "name": "25017",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25017"
          },
          {
            "name": "20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
          },
          {
            "name": "ADV-2008-1000",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1000/references"
          },
          {
            "name": "GLSA-200708-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
          },
          {
            "name": "26987",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26987"
          },
          {
            "name": "25301",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25301"
          },
          {
            "name": "DSA-1413",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1413"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1536"
          },
          {
            "name": "USN-528-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/528-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
          },
          {
            "name": "27155",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27155"
          },
          {
            "name": "26430",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26430"
          },
          {
            "name": "oval:org.mitre.oval:def:11058",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.mysql.com/bug.php?id=28984"
        },
        {
          "name": "26710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26710"
        },
        {
          "name": "27823",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27823"
        },
        {
          "name": "RHSA-2007:0875",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
        },
        {
          "name": "MDKSA-2007:177",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
        },
        {
          "name": "SUSE-SR:2007:019",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
        },
        {
          "name": "1018629",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018629"
        },
        {
          "name": "RHSA-2007:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
        },
        {
          "name": "26073",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26073"
        },
        {
          "name": "26621",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26621"
        },
        {
          "name": "26498",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26498"
        },
        {
          "name": "36732",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/36732"
        },
        {
          "name": "[announce] 20070712 MySQL Community Server 5.0.45 has been released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.mysql.com/announce/470"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
        },
        {
          "name": "25017",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25017"
        },
        {
          "name": "20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
        },
        {
          "name": "ADV-2008-1000",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1000/references"
        },
        {
          "name": "GLSA-200708-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
        },
        {
          "name": "26987",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26987"
        },
        {
          "name": "25301",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25301"
        },
        {
          "name": "DSA-1413",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1413"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1536"
        },
        {
          "name": "USN-528-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/528-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
        },
        {
          "name": "27155",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27155"
        },
        {
          "name": "26430",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26430"
        },
        {
          "name": "oval:org.mitre.oval:def:11058",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3780",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugs.mysql.com/bug.php?id=28984",
              "refsource": "MISC",
              "url": "http://bugs.mysql.com/bug.php?id=28984"
            },
            {
              "name": "26710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26710"
            },
            {
              "name": "27823",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27823"
            },
            {
              "name": "RHSA-2007:0875",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
            },
            {
              "name": "MDKSA-2007:177",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
            },
            {
              "name": "SUSE-SR:2007:019",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
            },
            {
              "name": "1018629",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018629"
            },
            {
              "name": "RHSA-2007:0894",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
            },
            {
              "name": "26073",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26073"
            },
            {
              "name": "26621",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26621"
            },
            {
              "name": "26498",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26498"
            },
            {
              "name": "36732",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/36732"
            },
            {
              "name": "[announce] 20070712 MySQL Community Server 5.0.45 has been released!",
              "refsource": "MLIST",
              "url": "http://lists.mysql.com/announce/470"
            },
            {
              "name": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html",
              "refsource": "CONFIRM",
              "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
            },
            {
              "name": "25017",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25017"
            },
            {
              "name": "20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
            },
            {
              "name": "ADV-2008-1000",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1000/references"
            },
            {
              "name": "GLSA-200708-10",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
            },
            {
              "name": "26987",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26987"
            },
            {
              "name": "25301",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25301"
            },
            {
              "name": "DSA-1413",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1413"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1536",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1536"
            },
            {
              "name": "USN-528-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/528-1/"
            },
            {
              "name": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html",
              "refsource": "CONFIRM",
              "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
            },
            {
              "name": "27155",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27155"
            },
            {
              "name": "26430",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26430"
            },
            {
              "name": "oval:org.mitre.oval:def:11058",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3780",
    "datePublished": "2007-07-15T22:00:00.000Z",
    "dateReserved": "2007-07-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:28:52.467Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-3780",
      "date": "2026-10-20",
      "epss": "0.14051",
      "percentile": "0.96535"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mysql:community_server:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ECB960FE-5005-4BD8-94E1-DB29AE3A58F6",
                    "versionEndIncluding": "5.0.41",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol."
          },
          {
            "lang": "es",
            "value": "MySQL Community Server anterior a 5.0.45 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) mediante un paquete de contrase\u00f1a mal formado en el protocolo de control."
          }
        ],
        "id": "CVE-2007-3780",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2007-07-15T22:30:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://bugs.mysql.com/bug.php?id=28984"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.mysql.com/announce/470"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://osvdb.org/36732"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/25301"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26073"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26430"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26498"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26621"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26710"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26987"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/27155"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/27823"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2007/dsa-1413"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/25017"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id?1018629"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2008/1000/references"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://issues.rpath.com/browse/RPL-1536"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://usn.ubuntu.com/528-1/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.mysql.com/bug.php?id=28984"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.mysql.com/announce/470"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/36732"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/25301"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26073"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26430"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26498"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26621"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26710"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26987"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27155"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27823"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2007/dsa-1413"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/25017"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1018629"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2008/1000/references"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://issues.rpath.com/browse/RPL-1536"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://usn.ubuntu.com/528-1/"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-20"
              },
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2025-11-21T13:19:22+00:00",
      "cve": "CVE-2007-3780",
      "id": "CVE-2007-3780",
      "initial_release_date": "2007-07-04T00:00:00+00:00",
      "product_status:fixed": "278",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "mysql malformed password crasher",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-3780.json",
      "version": "3"
    }
  }
}

CERTA-2008-AVI-162

Vulnerability from certfr_avis - Published: 2008-03-27 - Updated: 2008-03-27

Plusieurs vulnérabilités affectent les versions 4.x du gestionnaire de base de données MySQL. En particulier, certaines d'entre elles permettent à un utilisateur malveillant d'exécuter du code arbitraire à distance.

Description

De nombreuses vulnérabilités affectent la branche 4 de MySQL.

La création de tables MyISAM avec certaines options permet d'écraser des tables existantes.

Le renommage utilisé avec certains paramètres permet la réécriture de tables système.

Des erreurs provoquent des débordements de mémoire ou de pile ou des violations de la segmentation de la mémoire. Dans certains cas l'exploitation permet à un utilisateur d'exécuter du code arbitraire à distance.

Certaines erreurs permettent de provoquer un arrêt inopiné (crash) du serveur. L'utilisation d'un paquet d'authentification malformé permet de provoquer cet arrêt à distance.

Certaines erreurs conduisent à des insertions dans les affichages ou à la corruption de tables.

Solution

La version 4.1.24 corrige ces problèmes. Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Note : la branche 4 du logiciel MySQL n'est plus maintenue (cf. section Documentation). Il est recommandé de migrer vers la branche 5 de ce logiciel.

MySQL, version 4.1.23 et antérieures.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2007-3780

Vulnerability from fkie_nvd - Published: 2007-07-15 22:30 - Updated: 2026-06-16 22:42

Severity

Summary

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.

References

URL	Tags
cve@mitre.org	http://bugs.mysql.com/bug.php?id=28984
cve@mitre.org	http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html
cve@mitre.org	http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html	Patch
cve@mitre.org	http://lists.mysql.com/announce/470
cve@mitre.org	http://osvdb.org/36732
cve@mitre.org	http://secunia.com/advisories/25301
cve@mitre.org	http://secunia.com/advisories/26073
cve@mitre.org	http://secunia.com/advisories/26430
cve@mitre.org	http://secunia.com/advisories/26498
cve@mitre.org	http://secunia.com/advisories/26621
cve@mitre.org	http://secunia.com/advisories/26710
cve@mitre.org	http://secunia.com/advisories/26987
cve@mitre.org	http://secunia.com/advisories/27155
cve@mitre.org	http://secunia.com/advisories/27823
cve@mitre.org	http://security.gentoo.org/glsa/glsa-200708-10.xml
cve@mitre.org	http://www.debian.org/security/2007/dsa-1413
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDKSA-2007:177
cve@mitre.org	http://www.novell.com/linux/security/advisories/2007_19_sr.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2007-0875.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2007-0894.html
cve@mitre.org	http://www.securityfocus.com/archive/1/473874/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/bid/25017
cve@mitre.org	http://www.securitytracker.com/id?1018629
cve@mitre.org	http://www.vupen.com/english/advisories/2008/1000/references
cve@mitre.org	https://issues.rpath.com/browse/RPL-1536
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058
cve@mitre.org	https://usn.ubuntu.com/528-1/
af854a3a-2127-422b-91ae-364da2661108	http://bugs.mysql.com/bug.php?id=28984
af854a3a-2127-422b-91ae-364da2661108	http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html
af854a3a-2127-422b-91ae-364da2661108	http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html	Patch
af854a3a-2127-422b-91ae-364da2661108	http://lists.mysql.com/announce/470
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/36732
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/25301
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26073
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26430
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26498
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26621
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26710
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26987
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/27155
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/27823
af854a3a-2127-422b-91ae-364da2661108	http://security.gentoo.org/glsa/glsa-200708-10.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2007/dsa-1413
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2007:177
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2007_19_sr.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2007-0875.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2007-0894.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/473874/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/25017
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1018629
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2008/1000/references
af854a3a-2127-422b-91ae-364da2661108	https://issues.rpath.com/browse/RPL-1536
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058
af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/528-1/

Impacted products

	Vendor	Product	Version
	mysql	community_server	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mysql:community_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECB960FE-5005-4BD8-94E1-DB29AE3A58F6",
              "versionEndIncluding": "5.0.41",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol."
    },
    {
      "lang": "es",
      "value": "MySQL Community Server anterior a 5.0.45 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) mediante un paquete de contrase\u00f1a mal formado en el protocolo de control."
    }
  ],
  "id": "CVE-2007-3780",
  "lastModified": "2026-06-16T22:42:43.013",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-07-15T22:30:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.mysql.com/bug.php?id=28984"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.mysql.com/announce/470"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/36732"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25301"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26073"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26430"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26498"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26621"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26710"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26987"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27155"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27823"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2007/dsa-1413"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/25017"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018629"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/1000/references"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.rpath.com/browse/RPL-1536"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://usn.ubuntu.com/528-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.mysql.com/bug.php?id=28984"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.mysql.com/announce/470"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/36732"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25301"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26073"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26430"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26498"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26621"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26710"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26987"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27155"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27823"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2007/dsa-1413"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/25017"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018629"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/1000/references"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-1536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/528-1/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        },
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-R3RH-93Q9-6H72

Vulnerability from github – Published: 2022-05-01 18:17 – Updated: 2025-04-09 03:44

Details

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-3780"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-07-15T22:30:00Z",
    "severity": "MODERATE"
  },
  "details": "MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.",
  "id": "GHSA-r3rh-93q9-6h72",
  "modified": "2025-04-09T03:44:00Z",
  "published": "2022-05-01T18:17:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3780"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-1536"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/528-1"
    },
    {
      "type": "WEB",
      "url": "http://bugs.mysql.com/bug.php?id=28984"
    },
    {
      "type": "WEB",
      "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
    },
    {
      "type": "WEB",
      "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.mysql.com/announce/470"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/36732"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25301"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26073"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26430"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26498"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26621"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26710"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26987"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27155"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27823"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2007/dsa-1413"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/25017"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1018629"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/1000/references"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-3780

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.

Aliases

CVE-2007-3780

Aliases

CVE-2007-3780

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-3780",
    "description": "MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.",
    "id": "GSD-2007-3780",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-3780.html",
      "https://access.redhat.com/errata/RHSA-2007:0894",
      "https://access.redhat.com/errata/RHSA-2007:0875",
      "https://linux.oracle.com/cve/CVE-2007-3780.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-3780"
      ],
      "details": "MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.",
      "id": "GSD-2007-3780",
      "modified": "2023-12-13T01:21:42.352905Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-3780",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://bugs.mysql.com/bug.php?id=28984",
            "refsource": "MISC",
            "url": "http://bugs.mysql.com/bug.php?id=28984"
          },
          {
            "name": "26710",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26710"
          },
          {
            "name": "27823",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27823"
          },
          {
            "name": "RHSA-2007:0875",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
          },
          {
            "name": "MDKSA-2007:177",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
          },
          {
            "name": "SUSE-SR:2007:019",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
          },
          {
            "name": "1018629",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1018629"
          },
          {
            "name": "RHSA-2007:0894",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
          },
          {
            "name": "26073",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26073"
          },
          {
            "name": "26621",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26621"
          },
          {
            "name": "26498",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26498"
          },
          {
            "name": "36732",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/36732"
          },
          {
            "name": "[announce] 20070712 MySQL Community Server 5.0.45 has been released!",
            "refsource": "MLIST",
            "url": "http://lists.mysql.com/announce/470"
          },
          {
            "name": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html",
            "refsource": "CONFIRM",
            "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
          },
          {
            "name": "25017",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/25017"
          },
          {
            "name": "20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
          },
          {
            "name": "ADV-2008-1000",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2008/1000/references"
          },
          {
            "name": "GLSA-200708-10",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
          },
          {
            "name": "26987",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26987"
          },
          {
            "name": "25301",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25301"
          },
          {
            "name": "DSA-1413",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2007/dsa-1413"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-1536",
            "refsource": "CONFIRM",
            "url": "https://issues.rpath.com/browse/RPL-1536"
          },
          {
            "name": "USN-528-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/528-1/"
          },
          {
            "name": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html",
            "refsource": "CONFIRM",
            "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
          },
          {
            "name": "27155",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27155"
          },
          {
            "name": "26430",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26430"
          },
          {
            "name": "oval:org.mitre.oval:def:11058",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mysql:community_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "5.0.41",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3780"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                },
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugs.mysql.com/bug.php?id=28984",
              "refsource": "MISC",
              "tags": [],
              "url": "http://bugs.mysql.com/bug.php?id=28984"
            },
            {
              "name": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
            },
            {
              "name": "[announce] 20070712 MySQL Community Server 5.0.45 has been released!",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://lists.mysql.com/announce/470"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1536",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-1536"
            },
            {
              "name": "DSA-1413",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2007/dsa-1413"
            },
            {
              "name": "GLSA-200708-10",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200708-10.xml"
            },
            {
              "name": "MDKSA-2007:177",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
            },
            {
              "name": "RHSA-2007:0894",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
            },
            {
              "name": "RHSA-2007:0875",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0875.html"
            },
            {
              "name": "SUSE-SR:2007:019",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
            },
            {
              "name": "25017",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/25017"
            },
            {
              "name": "1018629",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1018629"
            },
            {
              "name": "26073",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26073"
            },
            {
              "name": "26498",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26498"
            },
            {
              "name": "26710",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26710"
            },
            {
              "name": "25301",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25301"
            },
            {
              "name": "26987",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26987"
            },
            {
              "name": "26621",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26621"
            },
            {
              "name": "27155",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27155"
            },
            {
              "name": "26430",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26430"
            },
            {
              "name": "27823",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27823"
            },
            {
              "name": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html"
            },
            {
              "name": "ADV-2008-1000",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2008/1000/references"
            },
            {
              "name": "36732",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/36732"
            },
            {
              "name": "oval:org.mitre.oval:def:11058",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058"
            },
            {
              "name": "USN-528-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "https://usn.ubuntu.com/528-1/"
            },
            {
              "name": "20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-15T21:30Z",
      "publishedDate": "2007-07-15T22:30Z"
    }
  }
}

RHSA-2007:0875

Vulnerability from csaf_redhat - Published: 2007-08-30 13:36 - Updated: 2026-06-25 10:34

Summary

Red Hat Security Advisory: mysql security update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2007-3780.

CVE-2007-3780

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.

Fixed: 130 products

https://access.redhat.com/errata/RHSA-2007:0875

Open the full advisory

RHSA-2007:0894

Vulnerability from csaf_redhat - Published: 2007-09-10 15:37 - Updated: 2025-11-21 17:32

Summary

Red Hat Security Advisory: mysql security update

Severity

Important

Scope

5 vulnerabilities in this advisory, including CVE-2007-3780.

CVE-2007-3780

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.

Fixed: 32 products

https://access.redhat.com/errata/RHSA-2007:0894

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-3780 (GCVE-0-2007-3780)

CERTA-2008-AVI-162

Description

Solution

FKIE_CVE-2007-3780

GHSA-R3RH-93Q9-6H72

GSD-2007-3780

RHSA-2007:0875

RHSA-2007:0894

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour