sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://bugs.mysql.com/bug.php?id=64884 | x_refsource_MISC |
| http://www.securityfocus.com/bid/53911 | vdb-entry x_refsource_BID |
| http://www.exploit-db.com/exploits/19092 | exploit x_refsource_EXPLOIT-DB |
| http://secunia.com/advisories/53372 | third-party-advisory x_refsource_SECUNIA |
| http://security.gentoo.org/glsa/glsa-201308-06.xml | vendor-advisory x_refsource_GENTOO |
| http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html | vendor-advisory x_refsource_SUSE |
| https://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql | x_refsource_MISC |
| http://securitytracker.com/id?1027143 | vdb-entry x_refsource_SECTRACK |
| http://secunia.com/advisories/49417 | third-party-advisory x_refsource_SECUNIA |
| http://seclists.org/oss-sec/2012/q2/493 | mailing-list x_refsource_MLIST |
| http://kb.askmonty.org/en/mariadb-5162-release-notes/ | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|