CVE-2003-0780
MySQL 4.0.14 and 3.23.x - Authenticated Buffer Overflow via Long Password Field
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2003-0780. PoCs published by bkbll, Frank DENIS.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in MySQL 3.23.x/4.0.x by manipulating the user table's password field to inject shellcode. It uses a combination of SQL queries and out-of-band (OOB) data to trigger the overflow and achieve remote code execution.
Description
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Exploits (2)
This exploit targets a buffer overflow vulnerability in MySQL 3.23.x/4.0.x by manipulating the user table's password field to inject shellcode. It uses a combination of SQL queries and out-of-band (OOB) data to trigger the overflow and achieve remote code execution.
This exploit demonstrates a buffer overflow vulnerability in MySQL server when handling excessively long user passwords. By altering the password field to a LONGTEXT type and updating it with an overly long string, an attacker with administrative privileges can trigger a buffer overflow, potentially leading to arbitrary code execution.