--- mysql-4.0.14/sql/sql_acl.cc.orig Thu Sep 11 06:59:14 2003 +++ mysql-4.0.14/sql/sql_acl.cc Thu Sep 11 06:59:42 2003 @@ -233,7 +233,7 @@ "Found old style password for user '%s'. Ignoring user. (You may want to restart mysqld using --old-protocol)", user.user ? user.user : ""); /* purecov: tested */ } - else if (length % 8) // This holds true for passwords + else if (length % 8 || length > 16) // This holds true for passwords { sql_print_error( "Found invalid password for user: '%s@%s'; Ignoring user",