CVE-2000-0957

Published: Dec 19, 2000Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.

Affected (4)

Products: Pam Mysql: Pam Mysql

Pam Mysql

1 product

Pam Mysql

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Pam Mysql Pam Mysql	Version 0.1
Pam Mysql Pam Mysql	Version 0.2
Pam Mysql Pam Mysql	Version 0.3
Pam Mysql Pam Mysql	Version 0.4

References (4)

http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5447

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5447

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.