GCVE - cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:*

part: a version: 3.23 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Mysql (`73f061c3-5e03-5b81-8702-d9e22bdb3e50`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/mysql/mysql-server`	purl2cpe	2026-06-01 10:18:14.710822

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1696`	vulnerable	2026-06-08 05:00:50.483094	Details available Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. Published: 2012-05-03T22:00:00.000Z Updated: 2024-08-06T19:08:38.184Z Open on db.gcve.eu Reference links http://secunia.com/advisories/53372 http://security.gentoo.org/glsa/glsa-201308-06.xml http://www.securityfocus.com/bid/53071 http://www.securitytracker.com/id?1026934 http://secunia.com/advisories/48890	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4031`	vulnerable	2026-06-08 04:49:10.764428	Details available MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy. Published: 2006-08-09T22:00:00.000Z Updated: 2024-08-07T18:57:46.100Z Open on db.gcve.eu Reference links http://secunia.com/advisories/21259 http://secunia.com/advisories/21627 http://www.us-cert.gov/cas/techalerts/TA07-072A.html http://www.novell.com/linux/security/advisories/2006_23_sr.html http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0903`	vulnerable	2026-06-08 04:48:55.669744	Details available MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query. Published: 2006-02-27T23:00:00.000Z Updated: 2024-08-07T16:48:56.622Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDKSA-2006:064 http://bugs.mysql.com/bug.php?id=17667 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9915 http://www.debian.org/security/2006/dsa-1079 http://secunia.com/advisories/19034	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0957`	vulnerable	2026-06-08 04:47:52.083750	Details available Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities. Published: 2004-10-21T04:00:00.000Z Updated: 2024-08-08T00:31:48.222Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/17783 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947 http://www.redhat.com/support/errata/RHSA-2004-611.html http://www.debian.org/security/2005/dsa-707 http://www.mandriva.com/security/advisories?name=MDKSA-2005:070	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0780`	vulnerable	2026-06-08 04:47:22.469708	Details available Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. Published: 2003-09-12T04:00:00.000Z Updated: 2024-08-08T02:05:12.567Z Open on db.gcve.eu Reference links http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743 http://www.redhat.com/support/errata/RHSA-2003-282.html http://www.mandriva.com/security/advisories?name=MDKSA-2003:094 http://marc.info/?l=bugtraq&m=106364207129993&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1255`	vulnerable	2026-06-08 04:46:19.466414	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0981`	vulnerable	2026-06-08 04:45:19.068029	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.