CVE-2004-0627: Critical severity MySQL mysql vulnerability
Published Jul 8, 2004
·Updated
The checkscramble323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.
Affected Software
1 affected component
MySQL mysql=4.1.0
Remediation
Patch Available
Event History
Jul 8, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0627?
CVE-2004-0627 is considered to have a high severity rating due to the potential for remote unauthorized access.
2
How do I fix CVE-2004-0627?
To fix CVE-2004-0627, upgrade MySQL to version 4.1.3 or later.
3
Which versions of MySQL are affected by CVE-2004-0627?
CVE-2004-0627 affects MySQL versions 4.1.0 through 4.1.2 and 5.0.
4
What is the impact of CVE-2004-0627 on MySQL?
CVE-2004-0627 allows remote attackers to bypass authentication, potentially compromising database security.
5
Are there known exploits for CVE-2004-0627?
Yes, there are known exploits that leverage this vulnerability to gain unauthorized access to MySQL databases.