Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
Authentication Bypass Vulnerability in MySQL
MySQL AB's MySQL 5.0 and MySQL 4.1 (prior to 4.1.3) contain a bug that lets a remote user entirely bypass the MySQL password-authentication mechanism.
Ken Pfeil
July 8, 2004
1 Min Read
Reported July 01, 2004, by NGSSoftware, Ltd.
VERSIONS AFFECTED
DESCRIPTION
MySQL AB's MySQL 5.0 and MySQL 4.1 (prior to 4.1.3) contain a bug that lets aremote user entirely bypass the MySQL password-authentication mechanism, sothat the user can authenticate as a MySQL user without a password. By using asimilar method, a stack buffer used in the authentication mechanism can beoverflowed, although exploitation of the overflow isn't straightforward. Bysubmitting a carefully crafted authentication packet, an attacker could bypasspassword authentication in MySQL 4.1. You can find more details about thisvulnerability on the discoverer's Web site.
VENDOR RESPONSE
MySQL AB has fixed this bug in the mostrecent builds of MySQL 5.0 and in MySQL 4.1.3.
CREDIT
Discovered by NGS Software, Ltd.
About the Author(s)
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
.jpg?width=700&auto=webp&quality=80&disable=upscale)