CVE-2007-3780
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon...
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.
Exploit likelihood
What each source reports
NVD Score used
5.0
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.
- Record
CVE-2007-3780- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.
- Record
CVE-2007-3780- Updated
- 2026-11-02
EUVDEUVD-2007-3764 No score
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.
- Record
EUVD-2007-3764- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r3rh-93q9-6h72 No score
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon...
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.
- Record
GHSA-r3rh-93q9-6h72- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:4.0 From an advisory covering 6 CVEs |
before 5.0.32-7etch3, plus listed versions 5.0.32-7etch15.0.32-7etch3~bpo31+1 |
5.0.32-7etch3 |
mysql-dfsgDebian:3.1 From an advisory covering 6 CVEs |
before 4.0.24-10sarge3, plus listed versions 4.0.24-104.0.24-10sarge14.0.24-10sarge2 |
4.0.24-10sarge3 |
mysql-dfsg-4.1Debian:3.1 From an advisory covering 6 CVEs |
before 4.1.11a-4sarge8, plus listed versions 4.1.11a-44.1.11a-4sarge14.1.11a-4sarge24.1.11a-4sarge34.1.11a-4sarge44.1.11a-4sarge54.1.11a-4sarge7 |
4.1.11a-4sarge8 |
mysqlRed Hat:enterprise_linux:4::as |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-benchRed Hat:enterprise_linux:4::as |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-develRed Hat:enterprise_linux:4::as |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-serverRed Hat:enterprise_linux:4::as |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysqlRed Hat:enterprise_linux:4::desktop |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-benchRed Hat:enterprise_linux:4::desktop |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-develRed Hat:enterprise_linux:4::desktop |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-serverRed Hat:enterprise_linux:4::desktop |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysqlRed Hat:enterprise_linux:4::es |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-benchRed Hat:enterprise_linux:4::es |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-develRed Hat:enterprise_linux:4::es |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-serverRed Hat:enterprise_linux:4::es |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysqlRed Hat:enterprise_linux:4::ws |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-benchRed Hat:enterprise_linux:4::ws |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-develRed Hat:enterprise_linux:4::ws |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysql-serverRed Hat:enterprise_linux:4::ws |
before 0:4.1.20-2.RHEL4.1.0.1 | 0:4.1.20-2.RHEL4.1.0.1 |
mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-testRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysqlRed Hat:enterprise_linux:5::client |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-debuginfoRed Hat:enterprise_linux:5::client |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysqlRed Hat:enterprise_linux:5::server |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-benchRed Hat:enterprise_linux:5::server |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-develRed Hat:enterprise_linux:5::server |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-serverRed Hat:enterprise_linux:5::server |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysql-testRed Hat:enterprise_linux:5::server |
before 0:5.0.22-2.1.0.1 | 0:5.0.22-2.1.0.1 |
mysqlRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-benchRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-clusterRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-develRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-libsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-serverRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-testRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3780 is a medium vulnerability (CVSS 5.0) in Mysql Community Server, published July 15, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.1%, the 96th percentile. Fixed in mysql 0:4.1.20-2.RHEL4.1.0.1.
References
bugs.mysql.com/bug.php?id=28984
secunia.com/advisories/26710
secunia.com/advisories/27823
redhat.com/support/errata/RHSA-2007-0875.html
mandriva.com/security/advisories?name=MDKSA-2007:177
novell.com/linux/security/advisories/2007_19_sr.html
Show 48 moreShow less
securitytracker.com/id?1018629
redhat.com/support/errata/RHSA-2007-0894.html
secunia.com/advisories/26073
secunia.com/advisories/26621
secunia.com/advisories/26498
osvdb.org/36732
lists.mysql.com/announce/470
dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html
securityfocus.com/bid/25017
securityfocus.com/archive/1/473874/100/0/threaded
vupen.com/english/advisories/2008/1000/references
security.gentoo.org/glsa/glsa-200708-10.xml
secunia.com/advisories/26987
secunia.com/advisories/25301
debian.org/security/2007/dsa-1413
issues.rpath.com/browse/RPL-1536
usn.ubuntu.com/528-1
dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html
secunia.com/advisories/27155
secunia.com/advisories/26430
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058
nvd.nist.gov/vuln/detail/CVE-2007-3780
github.com/advisories/GHSA-r3rh-93q9-6h72
access.redhat.com/errata/RHSA-2007:0875
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=254108
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0875.json
access.redhat.com/security/cve/CVE-2007-3780
cve.org/CVERecord?id=CVE-2007-3780
access.redhat.com/errata/RHSA-2007:0894
access.redhat.com/security/updates/classification
rhn.redhat.com/errata/RHEA-2007-0842.html
bugzilla.redhat.com/show_bug.cgi?id=241688
bugzilla.redhat.com/show_bug.cgi?id=241689
bugzilla.redhat.com/show_bug.cgi?id=248553
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0894.json
access.redhat.com/security/cve/CVE-2007-2691
cve.org/CVERecord?id=CVE-2007-2691
nvd.nist.gov/vuln/detail/CVE-2007-2691
access.redhat.com/security/cve/CVE-2007-2692
cve.org/CVERecord?id=CVE-2007-2692
nvd.nist.gov/vuln/detail/CVE-2007-2692
access.redhat.com/security/cve/CVE-2007-3781
cve.org/CVERecord?id=CVE-2007-3781
nvd.nist.gov/vuln/detail/CVE-2007-3781
access.redhat.com/security/cve/CVE-2007-3782
cve.org/CVERecord?id=CVE-2007-3782
nvd.nist.gov/vuln/detail/CVE-2007-3782