CVE-2003-0780
N/A
Published: September 12, 2003 at 04:00 AM UTC
Updated: June 16, 2026 at 10:02 PM UTC
3 products affected across 3 vendorsMySQL ServerMySQLLinux
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 78%
Description
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
95%
3.233.23.103.23.23.23.223.23.233.23.243.23.253.23.263.23.273.23.283.23.28 gamma3.23.293.23.33.23.303.23.313.23.323.23.333.23.343.23.363.23.373.23.383.23.393.23.43.23.403.23.413.23.423.23.433.23.443.23.453.23.463.23.473.23.483.23.493.23.53.23.503.23.513.23.523.23.533.23.53a3.23.543.23.54a3.23.553.23.563.23.83.23.94.0.04.0.14.0.104.0.114.0.11 gamma4.0.124.0.134.0.144.0.24.0.34.0.44.0.54.0.5a4.0.64.0.74.0.7 gamma4.0.84.0.8 gamma4.0.94.0.9 gamma4.1.0 alpha
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (11)
Vendor Advisoryx_refsource_CONECTIVA
Source: [email protected]
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743Mailing Listx_refsource_FULLDISC
Source: [email protected]
http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.htmlMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=106364207129993&w=2Vendor Advisoryx_refsource_TRUSTIX
Source: [email protected]
http://marc.info/?l=bugtraq&m=106381424420775&w=2Vendor Advisoryx_refsource_DEBIANPatch
Source: [email protected]
http://www.debian.org/security/2003/dsa-381Third Party Advisoryx_refsource_CERT-VNUS Government Resource
Source: [email protected]
http://www.kb.cert.org/vuls/id/516492Vendor Advisoryx_refsource_MANDRAKE
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2003:094Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card