CVE-2000-0957: The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input...

Security readout for executives and security teams

An older version of pam_mysql, a plug-in that lets Linux systems check logins against a MySQL database, did not clean up what users typed before sending it to the database. Attackers could abuse this to trick the database into revealing stored passwords or password hashes. The issue was fixed in version 0.4.7, released around 2000. Very low in modern environments. pam_mysql pre-0.4.7 is a 2000-era component; only legacy Unix/Linux systems still running that specific unpatched module against a MySQL credential store would be exposed. Most current distributions ship far newer releases or have retired the module entirely. Low priority for most organizations. This is a decades-old flaw in a niche authentication module; act only if an inventory shows pam_mysql is still deployed. If found, treat remediation as important because the impact is credential disclosure, which can cascade into broader account compromise. Mitigation focus: Upgrade pam_mysql to version 0.4.7 or later, or a currently maintained fork.; Retire pam_mysql entirely on modern systems and use a supported PAM/SSSD authentication backend.; Restrict database account privileges used by pam_mysql to the minimum needed for authentication..

Prepared

Jul 11, 2026, 23:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.