CVE:CVE-2000-0957
CNNVD:CNNVD-200012-089
mysql (pam_mysql) 0.4.7之前版本的可插入认证模型在构造SQL语句时不能正确净化用户输入。攻击者获得纯文本密码或者无用信息。
solution:Upgrade pam_mysql pam_mysql to a higher version than 0.1,0.2,0.3,0.4,and avoid the version 0.1,0.2,0.3,0.4