PT-2000-1868 · Mysql Server · Pam-Mysql

Publicado 2000-12-19 · Atualizado 2017-10-10 · CVE-2000-0957

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pam mysql versions prior to 0.4.7

Description The issue concerns the pluggable authentication module for mysql (pam mysql) and its failure to properly cleanse user input when constructing SQL statements. This allows attackers to obtain plaintext passwords or hashes.

Recommendations For versions prior to 0.4.7, update to version 0.4.7 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2000-0957

Produtos afetados

Pam-Mysql

Referências · 3

• http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5447 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0957 · Nota de Segurança