CVE-2000-0957EPSS p67.4%

CVE-2000-0957CVE-2000-0957

pam_mysql / pam_mysql

Description

The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.

Scoring

CVSS 7.5 ()
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS1.21% probability of exploitation · percentile 67.4% · 2026-10-05T12:00:23Z
Last modified2026-09-23
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.