FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0628

This CVE name corresponds to:

Entered Topic
2004-07-05 MySQL authentication bypass / buffer overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2004-0628
Phase Assigned(20040706)

Description

Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.

References

Source Reference
VULNWATCH 20040705 MySQL Authentication Bypass
BUGTRAQ 20040705 MySQL Authentication Bypass
XF mysql-myrnd-bo(16612)
CERT-VN VU#645326