Detailed analysis of security vulnerabilities
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.