CVE-2012-2122 sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when...
MediumCVSS 5.1
EPSS 96.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle MySQL | = 5.1.51 | No fix listed |
| oracle MySQL | = 5.1.52 | No fix listed |
| oracle MySQL | = 5.1.52-sp1 | No fix listed |
| oracle MySQL | = 5.1.53 | No fix listed |
| oracle MySQL | = 5.1.54 | No fix listed |
| oracle MySQL | = 5.1.55 | No fix listed |
| oracle MySQL | = 5.1.56 | No fix listed |
| oracle MySQL | = 5.1.57 | No fix listed |
| oracle MySQL | = 5.1.58 | No fix listed |
| oracle MySQL | = 5.1.59 | No fix listed |
| oracle MySQL | = 5.1.60 | No fix listed |
| oracle MySQL | = 5.1.61 | No fix listed |
| oracle MySQL | = 5.5.10 | No fix listed |
| oracle MySQL | = 5.5.11 | No fix listed |
| oracle MySQL | = 5.5.12 | No fix listed |
| oracle MySQL | = 5.5.13 | No fix listed |
| oracle MySQL | = 5.5.14 | No fix listed |
| oracle MySQL | = 5.5.15 | No fix listed |
| oracle MySQL | = 5.5.16 | No fix listed |
| oracle MySQL | = 5.5.17 | No fix listed |
| oracle MySQL | = 5.5.18 | No fix listed |
| oracle MySQL | = 5.5.19 | No fix listed |
| oracle MySQL | = 5.5.20 | No fix listed |
| oracle MySQL | = 5.5.21 | No fix listed |
| oracle MySQL | = 5.6.2 | No fix listed |
Show 36 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle MySQL | = 5.6.3 | No fix listed |
| oracle MySQL | = 5.6.4 | No fix listed |
| oracle MySQL | = 5.6.5 | No fix listed |
| MariaDB Server | = 5.1.41 | No fix listed |
| MariaDB Server | = 5.1.42 | No fix listed |
| MariaDB Server | = 5.1.44 | No fix listed |
| MariaDB Server | = 5.1.47 | No fix listed |
| MariaDB Server | = 5.1.49 | No fix listed |
| MariaDB Server | = 5.1.50 | No fix listed |
| MariaDB Server | = 5.1.51 | No fix listed |
| MariaDB Server | = 5.1.53 | No fix listed |
| MariaDB Server | = 5.1.55 | No fix listed |
| MariaDB Server | = 5.1.60 | No fix listed |
| MariaDB Server | = 5.1.61 | No fix listed |
| MariaDB Server | = 5.2.0 | No fix listed |
| MariaDB Server | = 5.2.1 | No fix listed |
| MariaDB Server | = 5.2.2 | No fix listed |
| MariaDB Server | = 5.2.3 | No fix listed |
| MariaDB Server | = 5.2.4 | No fix listed |
| MariaDB Server | = 5.2.5 | No fix listed |
| MariaDB Server | = 5.2.6 | No fix listed |
| MariaDB Server | = 5.2.7 | No fix listed |
| MariaDB Server | = 5.2.8 | No fix listed |
| MariaDB Server | = 5.2.9 | No fix listed |
| MariaDB Server | = 5.2.10 | No fix listed |
| MariaDB Server | = 5.2.11 | No fix listed |
| MariaDB Server | = 5.3.0 | No fix listed |
| MariaDB Server | = 5.3.1 | No fix listed |
| MariaDB Server | = 5.3.2 | No fix listed |
| MariaDB Server | = 5.3.3 | No fix listed |
| MariaDB Server | = 5.3.4 | No fix listed |
| MariaDB Server | = 5.3.5 | No fix listed |
| MariaDB Server | = 5.3.6 | No fix listed |
| MariaDB Server | = 5.5.20 | No fix listed |
| MariaDB Server | = 5.5.21 | No fix listed |
| MariaDB Server | = 5.5.22 | No fix listed |
References
- bugs.mysql.com exploit
- kb.askmonty.org
- SUSE-SU-2012:0984 vendor-advisory
- [oss-security] 20120609 Security vulnerability in MySQL/MariaDB sql/password.c mailing-list patch
- 49417 third-party-advisory vendor-advisory
- 53372 third-party-advisory
- GLSA-201308-06 vendor-advisory
- 1027143 vdb-entry
- 19092 exploit
- 53911 exploit vdb-entry
- community.rapid7.com exploit