Description

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.

Remediation

References

CVE-2001-1275

Related Vulnerabilities

Dolibarr Inadequate Encryption Strength Vulnerability (CVE-2017-7888)

WordPress Plugin Media Library Categories 'termid' Parameter SQL Injection (1.0.6)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3092)

Perl Numeric Errors Vulnerability (CVE-2011-2939)

MySQL CVE-2015-0438 Vulnerability (CVE-2015-0438)

Severity

High

Classification

CVE-2001-1275

Tags

Missing Update Known Vulnerabilities