GCVE-110-CERTCC-2004-184030

Advisory Published

Vulnetix · Advisory published July 1, 2004

There is a vulnerability in the password authentication mechanism of MySQL which could allow an attacker to bypass authentication by supplying a zero-length string.

Download JSON Open in Console

Risk Scores

certcc-cam

impact12population5exploitation0widely_known15score_current5.7375ease_of_exploitation15

Aliases

CVE-2004-0627

Transitive aliases

GSD-2004-0627 GHSA-77xv-jf9g-qvgv EUVD-2004-0626

References

MySQL fails to properly evaluate zero-length strings in the check_scramble_323() function

advisory

MySQL fails to properly evaluate zero-length strings in the check_scramble_323() function

url

MySQL fails to properly evaluate zero-length strings in the check_scramble_323() function

url

MySQL fails to properly evaluate zero-length strings in the check_scramble_323() function

url

MySQL fails to properly evaluate zero-length strings in the check_scramble_323() function

url

MySQL fails to properly evaluate zero-length strings in the check_scramble_323() function

url

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON