CVE-2000-0045
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
CVE-2000-0045 is a medium vulnerability (CVSS 6.4) in Oracle Mysql, published January 11, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.99%, the 94th percentile. No source names a fixed version.
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
Exploit likelihood
What each source reports
NVD Score used
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
- Record
CVE-2000-0045- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
- Record
CVE-2000-0045- Updated
- 2026-11-02
EUVDEUVD-2000-0045 No score
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
- Record
EUVD-2000-0045- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j9w-mc69-3577 No score
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
- Record
GHSA-2j9w-mc69-3577- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MySQL 3.22.27/3.22.29/3.23.8 - GRANT Global Password Changing | 2000-02-15 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |