← back
CVE-2003-0780

CVE-2003-0780

EPSS 74.6%
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/23138unverifiedexploitdbwww.exploit-db.com/exploits/98unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.htmlhttp://marc.info/?l=bugtraq&m=106364207129993&w=2http://marc.info/?l=bugtraq&m=106381424420775&w=2http://secunia.com/advisories/9709http://www.debian.org/security/2003/dsa-381http://www.kb.cert.org/vuls/id/516492http://www.mandriva.com/security/advisories?name=MDKSA-2003:094http://www.redhat.com/support/errata/RHSA-2003-281.htmlhttp://www.redhat.com/support/errata/RHSA-2003-282.htmlhttp://www.securityfocus.com/archive/1/337012