FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0627

This CVE name corresponds to:

Entered Topic
2004-07-05 MySQL authentication bypass / buffer overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2004-0627
Phase Assigned(20040706)

Description

The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.

References

Source Reference
VULNWATCH 20040705 MySQL Authentication Bypass
BUGTRAQ 20040705 MySQL Authentication Bypass
CERT-VN VU#184030