CVE-2003-0780

high · 9

Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.

CVSS

78.4%

EPSS (exploit prob.)

100th

EPSS percentile

2003-09-22

Published

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
mysql	mysql	4.1.0
oracle	mysql	3.23
oracle	mysql	3.23.2
oracle	mysql	3.23.3
oracle	mysql	3.23.4
oracle	mysql	3.23.5
oracle	mysql	3.23.8
oracle	mysql	3.23.9
oracle	mysql	3.23.10
oracle	mysql	3.23.22
oracle	mysql	3.23.23
oracle	mysql	3.23.24
oracle	mysql	3.23.25
oracle	mysql	3.23.26
oracle	mysql	3.23.27
oracle	mysql	3.23.28
oracle	mysql	3.23.28
oracle	mysql	3.23.29
oracle	mysql	3.23.30
oracle	mysql	3.23.31
oracle	mysql	3.23.32
oracle	mysql	3.23.33
oracle	mysql	3.23.34
oracle	mysql	3.23.36
oracle	mysql	3.23.37
oracle	mysql	3.23.38
oracle	mysql	3.23.39
oracle	mysql	3.23.40
oracle	mysql	3.23.41
oracle	mysql	3.23.42
oracle	mysql	3.23.43
oracle	mysql	3.23.44
oracle	mysql	3.23.45
oracle	mysql	3.23.46
oracle	mysql	3.23.47
oracle	mysql	3.23.48
oracle	mysql	3.23.49
oracle	mysql	3.23.50
oracle	mysql	3.23.51
oracle	mysql	3.23.52

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0780