CORE IMPACT - Support :: The First Penetration Testing Framework

MySQL privilege escalation v1.13

Vulnerability exploited: CAN-2002-1374 - BID-6373

Category: Exploits/Tools

Upgrades privileges on an MySQL server from a user account to an administrator account.
A vulnerability exists where when changing users on a MySQL server, the authentication information is only verified to the length supplied by the client.This means that it is possible to supply a single character of authentication information and make multiple guesses until the authentication succeeds.This module attempts to upgrade a given user account to the 'root' account then downloads all of the password hashes from the MySQL.user table.

Supported Systems:

This module is included in the latest version of CORE IMPACT, the first automated comprehensive penetration testing product for accurately identifying information security risks. Click here to learn more about the product.