Improper Authentication in MySQL Server - CVE-2012-2122

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.

Affected software

How to mitigate CVE-2012-2122

Links to Public Exploits and PoC-codes

• Exploit #3648 - MySQL - Authentication Bypass (July 29, 2020)
• Exploit #3615 - MySQL Authentication Bypass Password Dump (July 29, 2020)

External References

• http://bugs.mysql.com/bug.php?id=64884
• http://kb.askmonty.org/en/mariadb-5162-release-notes/
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html
• http://seclists.org/oss-sec/2012/q2/493
• http://secunia.com/advisories/49417
• http://secunia.com/advisories/53372
• http://security.gentoo.org/glsa/glsa-201308-06.xml
• http://securitytracker.com/id?1027143
• http://www.exploit-db.com/exploits/19092
• http://www.securityfocus.com/bid/53911
• https://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql

Related Security Bulletins

• Improper Authentication in Oracle MySQL Server
• Improper Authentication in mysql (Alpine package)
• SUSE Linux update for MySQL
• Amazon Linux AMI update for mysql55