CVEvulnerability

CVE-2001-1275

7.2 HIGH Published 2001-01-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-01-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.

Affected configurations

• oracle mysql (<= 3.23.31)

References