Description

MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.

Remediation

References

CVE-2003-1480

Related Vulnerabilities

qdPM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-26165)

WordPress 4.2.x Cross-Site Request Forgery (4.2 - 4.2.22)

Oracle Database Server CVE-2012-1737 Vulnerability (CVE-2012-1737)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0122)

WordPress Plugin Postmatic-Post and comment subscriptions that invite you to hit reply Cross-Site Scripting (1.4.5)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2003-1480