mysql: authentication bypass
Package(s): | mysql-5.1, mysql-5.5, mysql-dfsg-5.0, mysql-dfsg-5.1 | CVE #(s): | CVE-2012-2122 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
Created: | June 12, 2012 | Updated: | August 13, 2012 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
Description: | From the Ubuntu advisory:
It was discovered that certain builds of MySQL incorrectly handled password authentication on certain platforms. A remote attacker could use this issue to authenticate with an arbitrary password and establish a connection. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
Alerts: |
|