Secunia

A weakness has been identified in the way that MySQL encrypts passwords when storing them.

The problem is that passwords, which are stored in a table using PASSWORD(), are encrypted in a way that can be brute forced at a great speed. This allows malicious people, who has retrieved passwords from the database, to brute force an eight character password in a matter of hours.

A tool is available to exploit this.

Solution
MySQL offers different ways to encrypt passwords. You may choose to use cryptographically strong algorithms like MD5, SHA1, or AES instead, which are all supported by MySQL.
Further details available in Customer Area

Provided and/or discovered by
Secret Squirrel

Original Advisory
http://packetstorm.linuxsecurity.com/Crackers/msqlfast.c

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area