Unscored severity · published Dec 6, 2004
CVE-2004-0627
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string
–
CVSS
69.6%
EPSS
No
On KEV
Description
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.
Exploitation
Is it being used?
Exploit prediction (EPSS)69.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Mysql · Mysql
4.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0627
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0627
Patch
http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html
marc.info
http://marc.info/?l=bugtraq&m=108904917528205&w=2
Patch
http://www.kb.cert.org/vuls/id/184030
More from Mysql
7.8
CVE-2017-15945
The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown…
–
CVE-2015-2575
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via…
–
CVE-2013-1492
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553
–
CVE-2012-0553
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492
–
CVE-2012-0882
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary…