CVE-2003-1480

Summary

MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.

Impact & exploitability

AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://secunia.com/advisories/8753Advisory
• http://www.securiteam.com/tools/5WP031FA0U.htmlExploit
• http://www.securityfocus.com/bid/7500Exploit