CVE-2000-0957: Pam MySQL

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.

Affected products

• Pam MySQL Pam MySQL: version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only

Published 2000-12-19. Last modified 2026-09-23.