MySQL AB ODBC Driver Plain Text Password Vulnerability
BID:8245
Info
MySQL AB ODBC Driver Plain Text Password Vulnerability
| Bugtraq ID: | 8245 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 22 2003 12:00AM |
| Updated: | Jul 22 2003 12:00AM |
| Credit: | Discovery is credited to hanez <[email protected]>. |
| Vulnerable: |
MySQL AB ODBC Driver 3.51 |
| Not Vulnerable: | |
Discussion
MySQL AB ODBC Driver Plain Text Password Vulnerability
A vulnerability has been reported in the MySQL AB ODBC (Open Data Base Connectivity) driver implementation. The MySQL ODBC driver reportedly stores plain text credentials used to connect to the specified database in the system registry.
These credentials may be disclosed and used to connect to the target database.
Other ODBC drivers may also be prone to the same issue, though this is not confirmed.
A vulnerability has been reported in the MySQL AB ODBC (Open Data Base Connectivity) driver implementation. The MySQL ODBC driver reportedly stores plain text credentials used to connect to the specified database in the system registry.
These credentials may be disclosed and used to connect to the target database.
Other ODBC drivers may also be prone to the same issue, though this is not confirmed.
Solution / Fix
MySQL AB ODBC Driver Plain Text Password Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.