Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MySQL Improper Authentication Vulnerability - CVE-2012-2122 - Vulnerability Database
MySQL

MySQL Improper Authentication Vulnerability - CVE-2012-2122

Medium
Reference: CVE-2012-2122
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-2122
Title: MySQL Improper Authentication Vulnerability
Overview:

sql/password.c in Oracle MySQL 5.1.x before 5.1.63 5.5.x before 5.5.24 and 5.6.x before 5.6.6 and MariaDB 5.1.x before 5.1.62 5.2.x before 5.2.12 5.3.x before 5.3.6 and 5.5.x before 5.5.23 when running in certain environments with certain implementations of the memcmp function allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password which eventually causes a token comparison to succeed due to an improperly-checked return value.