MySQL AB ODBC Driver 3.51 – Plain Text Password

漏洞ID	1054049	漏洞类型
发布时间	2003-07-22	更新时间	2003-07-22
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22946

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/8245/info

A vulnerability has been reported in the MySQL AB ODBC (Open Data Base Connectivity) driver implementation. The MySQL ODBC driver reportedly stores plain text credentials used to connect to the specified database in the system registry.

These credentials may be disclosed and used to connect to the target database.

Other ODBC drivers may also be prone to the same issue, though this is not confirmed.

[HKEY_LOCAL_MACHINESOFTWAREODBCODBC.INITESTDSN]
"Driver"="C:\WINDOWS\System32\myodbc3.dll"
"Description"="MySQL ODBC 3.51 Driver DSN"
"Database"="test"
"Server"="192.168.0.1"
"User"="user_name"
"Password"="plain_password"
"Port"="3306"
"Option"="3"
"Stmt"=""

相关推荐: WFTPD Path/File Mapping Buffer Overflow Vulnerability

WFTPD Path/File Mapping Buffer Overflow Vulnerability 漏洞ID 1103248 漏洞类型 Boundary Condition Error 发布时间 2001-05-24 更新时间 2001-05-24 C…