MySQL Weak Password Encryption Vulnerability
BID:7500
Info
MySQL Weak Password Encryption Vulnerability
| Bugtraq ID: | 7500 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 05 2003 12:00AM |
| Updated: | May 05 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Secret Squirrel. |
| Vulnerable: |
MySQL AB MySQL 4.0.11 -gamma MySQL AB MySQL 4.0.9 -gamma MySQL AB MySQL 4.0.8 -gamma MySQL AB MySQL 4.0.7 -gamma MySQL AB MySQL 4.0.5 a MySQL AB MySQL 4.0.3 MySQL AB MySQL 4.0.2 MySQL AB MySQL 4.0.1 MySQL AB MySQL 4.0 .0 MySQL AB MySQL 3.23.56 MySQL AB MySQL 3.23.55 MySQL AB MySQL 3.23.54 a MySQL AB MySQL 3.23.54 MySQL AB MySQL 3.23.53 a MySQL AB MySQL 3.23.53 MySQL AB MySQL 3.23.52 MySQL AB MySQL 3.23.51 MySQL AB MySQL 3.23.50 MySQL AB MySQL 3.23.49 MySQL AB MySQL 3.23.48 MySQL AB MySQL 3.23.47 MySQL AB MySQL 3.23.46 MySQL AB MySQL 3.23.45 MySQL AB MySQL 3.23.44 MySQL AB MySQL 3.23.43 MySQL AB MySQL 3.23.42 MySQL AB MySQL 3.23.41 MySQL AB MySQL 3.23.40 MySQL AB MySQL 3.23.39 MySQL AB MySQL 3.23.38 MySQL AB MySQL 3.23.37 MySQL AB MySQL 3.23.36 MySQL AB MySQL 3.23.34 MySQL AB MySQL 3.23.33 MySQL AB MySQL 3.23.32 MySQL AB MySQL 3.23.31 MySQL AB MySQL 3.23.30 MySQL AB MySQL 3.23.29 MySQL AB MySQL 3.23.28 gamma MySQL AB MySQL 3.23.28 MySQL AB MySQL 3.23.27 MySQL AB MySQL 3.23.26 MySQL AB MySQL 3.23.25 MySQL AB MySQL 3.23.24 MySQL AB MySQL 3.23.23 MySQL AB MySQL 3.23.22 MySQL AB MySQL 3.23.10 MySQL AB MySQL 3.23.9 MySQL AB MySQL 3.23.8 MySQL AB MySQL 3.23.5 MySQL AB MySQL 3.23.4 MySQL AB MySQL 3.23.3 MySQL AB MySQL 3.23.2 MySQL AB MySQL 3.23 .x MySQL AB MySQL 3.22.32 MySQL AB MySQL 3.22.30 MySQL AB MySQL 3.22.29 MySQL AB MySQL 3.22.28 MySQL AB MySQL 3.22.27 MySQL AB MySQL 3.22.26 MySQL AB MySQL 3.22 .x MySQL AB MySQL 3.21 .x MySQL AB MySQL 3.20.32 a MySQL AB MySQL 3.20 .x MySQL AB MySQL 4.1.0.0-alpha MySQL AB MySQL 4.1.0-0 |
| Not Vulnerable: | |
Discussion
MySQL Weak Password Encryption Vulnerability
MySQL has been reported to implement a weak password encryption algorithm. It has been reported that the MySQL function used to encrypt MySQL passwords makes just one pass over the password and employs a weak left shift based cipher. The hash may be cracked in little time using a bruteforce method.
An attacker may use information recovered in this way to aid in further attacks launched against the underlying system.
MySQL has been reported to implement a weak password encryption algorithm. It has been reported that the MySQL function used to encrypt MySQL passwords makes just one pass over the password and employs a weak left shift based cipher. The hash may be cracked in little time using a bruteforce method.
An attacker may use information recovered in this way to aid in further attacks launched against the underlying system.
Exploit / POC
MySQL Weak Password Encryption Vulnerability
The following proof of concept has been supplied:
The following proof of concept has been supplied:
Solution / Fix
MySQL Weak Password Encryption Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.