PT-2000-1868 · Mysql Server · Pam-Mysql

Published 2000-12-19 · Updated 2017-10-10 · CVE-2000-0957

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pam mysql versions prior to 0.4.7

Description The issue concerns the pluggable authentication module for mysql (pam mysql) and its failure to properly cleanse user input when constructing SQL statements. This allows attackers to obtain plaintext passwords or hashes.

Recommendations For versions prior to 0.4.7, update to version 0.4.7 or later to resolve the issue.

Fix

Related Identifiers

CVE-2000-0957

Affected Products

Pam-Mysql

References · 3

• http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0957 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5447 · Note