MySQL authentication bypass / buffer overflow

By submitting a carefully crafted authentication packet, it is possible for an attacker to bypass password authentication in MySQL 4.1. Using a similar method, a stack buffer used in the authentication mechanism can be overflowed...

CVE-2002-1952

phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable...

CVE-2001-0990

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library...

BUZ.CH Security Advisory 200109041: Inter7 vpopmail DB pw problem

--------------------------------------------------------------------- BUZ.CH Security Advisory 200109041: Inter7 vpopmail DB pw problem --------------------------------------------------------------------- Subject: local password problem in vpopmail when installed with MySQL module and all other...

[CORE SDI ADVISORY] MySQL weak authentication

CORE SDI http://www.core-sdi.com Vulnerability Report for MySQL Authentication Vulnerability Date Published: 2000-10-23 Advisory ID: CORE-20001023 Bugtraq ID: 1826 CVE CAN: Not currently assigned. Title: MySQL Authentication Vulnerability Class: Design Error Remotely Exploitable: Yes Locally...