CVE-2001-1275

CVE-2001-1275 describes a vulnerability in MySQL versions prior to 3.23.31, where authenticated users could leverage the SHOW GRANTS command to retrieve encrypted administrator passwords from the mysql.user table, potentially leading to privilege escalation through password cracking. This vulnerability carries a high CVSS score of 7.2, indicating a local attack vector with low complexity, allowing for complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this decades-old flaw.