high7.5
CVE-2000-0957
The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows atta…
Impact
The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pam Mysql | Pam Mysql | Versions 0.1, 0.2, 0.3, 0.4 |