CVE-2002-1374
7.5
CVSS v2.0 Base Score
20.45%
LOW RiskEPSS (97th percentile)
NVD-CWE-Other
The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.
Published: 12/23/2002
Modified: 6/16/2026
Vulnerability Summary
CVSS v2 Score
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Score (Exploitation Probability)
20.45%LOW Exploitation Risk
97th percentile
This vulnerability has a 20.45% probability of being exploited in the next 30 days, ranking higher than 97% of all scored CVEs.
CWE Classification
NVD-CWE-Other