MySQL Authentication Protocol Token Comparison Casting Failure Password Bypass

medium Nessus Plugin ID 61393

Language:

Synopsis

The remote database server can be accessed without a valid password.

Description

A flaw in the MySQL server allows remote users to authenticate without a valid password due to a failure when casting a randomly generated token and comparing it to an expected value.

Solution

Upgrade to MySQL 5.1.63 / 5.5.24 or later.

See Also

https://seclists.org/oss-sec/2012/q2/493

https://bugs.mysql.com/bug.php?id=64884

Plugin Details

Severity: Medium

ID: 61393

File Name: mysql_auth_bypass.nasl

Version: 1.13

Type: remote

Family: Databases

Published: 8/2/2012

Updated: 3/27/2019

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

CVSS v2

Risk Factor: Medium

Base Score: 5.1

Temporal Score: 4.2

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2012-2122

CVSS v3

Risk Factor: Medium

Base Score: 5.6

Temporal Score: 5.2

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:mysql:mysql, cpe:/a:oracle:mysql

Exploit Available: true

Exploit Ease: Exploits are available

Exploited by Nessus: true

Patch Publication Date: 5/7/2012

Vulnerability Publication Date: 5/7/2012

Exploitable With

CANVAS (CANVAS)

Reference Information

CVE: CVE-2012-2122

BID: 53911