NetSight
IP …
critical9.0Public exploit code

CVE-2003-0780

Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arb…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.

Affected products

VendorProductAffected versions
MysqlMysql
Version 4.1.0
OracleMysql
Versions 3.23, 3.23.2, 3.23.3, 3.23.4, 3.23.5, 3.23.8
ConectivaLinux
Versions 7.0, 8.0, 9.0

References