Buffer Overflow Vulnerability in MySQL Daemon (mysqld) on Win32 Platform via Long datadir Parameter in my.ini Initialization File

Buffer Overflow Vulnerability in MySQL Daemon (mysqld) on Win32 Platform via Long datadir Parameter in my.ini Initialization File

CVE-2002-0969 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.