medium4.3Public exploit code
CVE-2003-1480
MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MySQL 3.x/4.0.x - Weak Password Encryption2003-05-05 · local · linux · Verified
Impact
MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mysql | Mysql | Version 4.1.0 |
| Oracle | Mysql | Versions 3.20, 3.20.32a, 3.21, 3.22, 3.22.26, 3.22.27 |