Unscored CVE-2001-1275 EUVD-2001-1256GHSA-jr9h-ffpv-wrqm

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from t…

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.

References

MDKSA-2001:014 vendor-advisory
RHSA-2001:003 vendor-advisory
FreeBSD-SA-01:16 vendor-advisory
CSSA-2001-006.0 vendor-advisory