Description
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Eli Kara · perlremotemultiple
https://www.exploit-db.com/exploits/311
Scores
EPSS
0.5192
EPSS Percentile
97.9%
Details
Status
published
Products (1)
mysql/mysql
4.1.0
Published
Dec 06, 2004
Tracked Since
Feb 18, 2026