PT-2001-2403 · Mysql Server · Mysql Server

Publicado 2001-01-19 · Atualizado 2019-10-07 · CVE-2001-1275

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: MySQL versions prior to 3.23.31

Description: The issue allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table. This could potentially allow them to gain privileges via password cracking.

Recommendations: For versions prior to 3.23.31, update to version 3.23.31 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2001-1275

Produtos afetados

Mysql Server

Referências · 5

• http://marc.info/?l=bugtraq&m=98089552030459&w=2 · Aviso do Fabricante
• http://calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt · Aviso do Fabricante
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-003.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1275 · Nota de Segurança