CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2000-0957

The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.5%

CVSS Severity

CVSS v2 Score 7.5

References

http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/5447
http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/5447

Products affected by CVE-2000-0957

Pam Mysql » Pam Mysql » Version: 0.1

cpe:2.3:a:pam_mysql:pam_mysql:0.1
Pam Mysql » Pam Mysql » Version: 0.2

cpe:2.3:a:pam_mysql:pam_mysql:0.2
Pam Mysql » Pam Mysql » Version: 0.3

cpe:2.3:a:pam_mysql:pam_mysql:0.3
Pam Mysql » Pam Mysql » Version: 0.4

cpe:2.3:a:pam_mysql:pam_mysql:0.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2000-0957

Products

Pricing

Contact Us