Vulnerability in N/a
CVE-2004-0627
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.
EPSS: 0.519 (98.0th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
References
- VU#184030 (x_refsource_CERT-VN, third-party-advisory)
- 20040705 MySQL Authentication Bypass (mailing-list, x_refsource_BUGTRAQ)
- 20040705 MySQL Authentication Bypass (mailing-list, x_refsource_VULNWATCH)