CVE-2004-0627

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.htmlPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=108904917528205&w=2
http://www.kb.cert.org/vuls/id/184030Patch, Third Party Advisory, US Government Resource
http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.htmlPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=108904917528205&w=2
http://www.kb.cert.org/vuls/id/184030Patch, Third Party Advisory, US Government Resource

Timeline

Published: Dec 6, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-062810.0Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly CVE-2004-06297.5Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote at CVE-2004-063010.0The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9,CVE-2004-063110.0Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including CVE-2004-06327.5Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to e CVE-2004-06335.0The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer ov CVE-2004-06345.0The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a hand CVE-2004-06355.0The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malforme CVE-2004-063610.0Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote CVE-2004-06376.5Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload pack CVE-2004-06388.5Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and CVE-2004-06396.8Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or sc