CVE-2000-0045

Description

MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.

Affected products

• oracle / mysql3.22.27 – 3.22.27
• oracle / mysql3.22.29 – 3.22.29
• oracle / mysql3.23.8 – 3.23.8

Exploits & proofs of concept

• exploit-dbMySQL 3.22.27/3.22.29/3.23.8 - GRANT Global Password Changingby Viktor Fougstedt

References

• MISChttp://www.securityfocus.com/bid/926