Lucene search

K
canvasImmunity CanvasMYSQL_AUTH_BYPASS
HistoryDec 06, 2004 - 5:00 a.m.

Immunity Canvas: MYSQL_AUTH_BYPASS

2004-12-0605:00:00
Immunity Canvas
exploitlist.immunityinc.com
28

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.91 High

EPSS

Percentile

98.6%

Name mysql_auth_bypass
CVE CVE-2004-0627 Exploit Pack
OSVDB: http://www.osvdb.org/displayvuln.php?osvdb_id=7475
Notes:
Mysql authentication can be bypass by a special crafted password with zeroed-strings password. Note
that the version 4.1.3 should really be treated as 4.1.03 and can be misleading when testing against
a server that has a version number of say 4.1.20.

Date public: 07/2004
CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0627
CVSS: 10.0

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.91 High

EPSS

Percentile

98.6%