EDB-311
functionalMySQL 4.1/5.0 - Zero-Length Password Authentication Bypass
view exploit source exploit_dbverifiedtype remoteauthor Eli Karapublished 2004-07-10catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2004-0627US | high10.0 | Exploit | ||
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan