PT-2003-1873 · Mysql Server · Mysql Server

Jedi · Published 2003-09-12 · Updated 2019-12-17 · CVE-2003-0780

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: MySQL versions 3.23.x and earlier, 4.0.14 and earlier

Description: A buffer overflow issue exists in the get salt from password function from sql acl.cc, allowing attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.

Recommendations: For MySQL versions 3.23.x and earlier, and 4.0.14 and earlier, update to a version that contains a fix for this issue to prevent exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-0780

DSA-381

Affected Products

Mysql Server

References · 14

• 🔥 https://exploit-db.com/exploits/98 · Exploit
• 🔥 https://exploit-db.com/exploits/23138 · Exploit
• 🔥 http://securityfocus.com/archive/1/337012 · Exploit
• http://marc.info/?l=bugtraq&m=106381424420775&w=2 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743 · Vendor Advisory
• http://debian.org/security/2003/dsa-381 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-281.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-282.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2003:094 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0780 · Security Note
• http://kb.cert.org/vuls/id/516492 · Note
• http://secunia.com/advisories/9709 · Note
• http://marc.info/?l=bugtraq&m=106364207129993&w=2 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.html · Note