National Vulnerability Database (CVE-2003-0780)

National Cyber-Alert System Vulnerability Summary: CVE-2003-0780
Orirignal release date: 2003-09-22 Source: US-CERT/NIST ### Overview Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: Buffer overflow in MySQL Hyperlink: http://www.securityfocus.com/archive/1/337012 External Source: lists.netsys.com Name: [Full-Disclosure] Buffer overflow in MySQL Hyperlink: http://lists.netsys.com/pipermail/full-disclosure/2003-September/009819.html External Source: The Aims group Name: m=106364207129993& Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: debian Name: DSA-381-1 mysql -- buffer overflow Hyperlink: http://www.debian.org/security/2003/dsa-381 External Source: Red Hat Name: Updated MySQL packages fix vulnerability Hyperlink: http://www.redhat.com/support/errata/RHSA-2003-281.html External Source: FULLDISC Name: 20030910 Buffer overflow in MySQL Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.html External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: MANDRAKE Name: MDKSA-2003:094 Hyperlink: http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:094 External Source: CONECTIVA Name: amp Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a& External Source: REDHAT Name: RHSA-2003:282 Hyperlink: http://www.redhat.com/support/errata/RHSA-2003-282.html External Source: TRUSTIX Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: CERT-VN Name: VU#516492 Hyperlink: http://www.kb.cert.org/vuls/id/516492 External Source: SECUNIA Name: 9709 Hyperlink: http://secunia.com/advisories/9709 ### Vulnerable Software and Vendor MySQL (MySQL AB) Conectiva Linux (Conectiva) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0780