CVE-2001-1275

CVE-2001-1275 affects MySQL prior to 3.23.31. The SHOW GRANTS vulnerability lets any MySQL account obtain the encrypted administrator password from mysql.user, potentially enabling privilege escalation via password cracking. A fix is available in MySQL 3.23.31 (Mandrake MDKSA-2001:014-1). Upgrade...