CVE-2003-0780: Buffer Overflow
Published Sep 12, 2003
·Updated
Buffer overflow in getsaltfrompassword from sqlacl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Affected Software
70 affected components
Conectiva Linux=9.0
Conectiva Linux=8.0
Conectiva Linux=7.0
MySQL mysql=4.1.0
Oracle MySQL=3.23
Oracle MySQL=3.23.2
Oracle MySQL=3.23.3
Oracle MySQL=3.23.4
Oracle MySQL=3.23.5
Oracle MySQL=3.23.25
Oracle MySQL=3.23.26
Oracle MySQL=3.23.32
Oracle MySQL=3.23.33
Oracle MySQL=3.23.22
Oracle MySQL=3.23.28-gamma
Oracle MySQL=3.23.29
Oracle MySQL=3.23.9
Oracle MySQL=3.23.10
Oracle MySQL=3.23.27
Oracle MySQL=3.23.28
Oracle MySQL=3.23.34
Oracle MySQL=3.23.36
Oracle MySQL=3.23.8
Oracle MySQL=3.23.23
Oracle MySQL=3.23.24
Oracle MySQL=3.23.30
Oracle MySQL=3.23.31
Oracle MySQL=3.23.40
Oracle MySQL=3.23.41
Oracle MySQL=3.23.48
Oracle MySQL=3.23.49
Oracle MySQL=3.23.54a
Oracle MySQL=3.23.55
Oracle MySQL=4.0.5
Oracle MySQL=4.0.5a
Oracle MySQL=4.0.6
Oracle MySQL=3.23.37
Oracle MySQL=3.23.38
Oracle MySQL=3.23.44
Oracle MySQL=3.23.45
Oracle MySQL=3.23.52
Oracle MySQL=3.23.53
Oracle MySQL=4.0.0
Oracle MySQL=4.0.2
Oracle MySQL=4.0.8
Oracle MySQL=4.0.8-gamma
Oracle MySQL=3.23.42
Oracle MySQL=3.23.43
Oracle MySQL=3.23.50
Oracle MySQL=3.23.51
Oracle MySQL=3.23.56
Oracle MySQL=4.0.7
Oracle MySQL=4.0.7-gamma
Oracle MySQL=3.23.39
Oracle MySQL=3.23.46
Oracle MySQL=3.23.47
Oracle MySQL=3.23.53a
Oracle MySQL=3.23.54
Oracle MySQL=4.0.1
Oracle MySQL=4.0.3
Oracle MySQL=4.0.4
Oracle MySQL=4.0.9
Oracle MySQL=4.0.9-gamma
Oracle MySQL=4.0.11
Oracle MySQL=4.0.11-gamma
Oracle MySQL=4.0.14
Oracle MySQL=4.0.12
Oracle MySQL=4.0.13
Oracle MySQL=4.1.0-alpha
Oracle MySQL=4.0.10
Remediation
Patch Available
Patch Available
Patch Available
Event History
Sep 12, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Sep 22, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0780?
CVE-2003-0780 is classified as a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2003-0780?
To fix CVE-2003-0780, upgrade to MySQL version 4.0.15 or later.
3
What software is affected by CVE-2003-0780?
CVE-2003-0780 affects MySQL versions 3.23.x and 4.0.14 and earlier, along with specific versions of Conectiva Linux.
4
What type of vulnerability is CVE-2003-0780?
CVE-2003-0780 is a buffer overflow vulnerability that can be exploited by users with ALTER TABLE privileges.
5
Who can exploit CVE-2003-0780?
CVE-2003-0780 can be exploited by attackers with ALTER TABLE privileges on the affected MySQL installations.