Oracle MySQL 5.1.x < 5.1.63, 5.5.x < 5.5.24, 5.6.x < 5.6.6 - Authentication Bypass via Repeated Failed Authentication
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2012-2122.
PoCs published by David Kennedy (ReL1K), cyberharsh, Avinza, including Metasploit module auxiliary/scanner/mysql/mysql_authbypass_hashdump.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages a MySQL authentication bypass vulnerability (CVE-2012-2122) by repeatedly attempting to authenticate as 'root' with an incorrect password. The flaw in MySQL's memcmp implementation allows authentication to succeed after multiple failed attempts.
Description
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.
Exploits (6)
This exploit leverages a MySQL authentication bypass vulnerability (CVE-2012-2122) by repeatedly attempting to authenticate as 'root' with an incorrect password. The flaw in MySQL's memcmp implementation allows authentication to succeed after multiple failed attempts.
This repository provides a writeup and environment setup for CVE-2012-2122, an authentication bypass vulnerability in MySQL/MariaDB due to incorrect handling of password comparisons. It includes instructions for reproducing the flaw using a brute-force approach.
This is a PHP-based scanner for CVE-2012-2122, which targets MySQL servers with weak authentication. It attempts to connect to MySQL instances using a random password and, if successful, dumps user credentials from the 'mysql.user' table.
This repository provides a Docker-based lab environment to demonstrate CVE-2012-2122, a MySQL authentication bypass vulnerability affecting versions 5.5.23 and earlier. It includes an automated flag generation script for training purposes.
This Go-based PoC exploits CVE-2012-2122, a MySQL authentication bypass vulnerability, by repeatedly attempting to connect with incorrect credentials. It retrieves user credentials from the 'mysql.user' table upon successful exploitation.
This Metasploit module exploits CVE-2012-2122, an authentication bypass vulnerability in MySQL/MariaDB, to dump username and password hashes. It uses a brute-force approach to bypass authentication by sending repeated login attempts with random passwords.
Nuclei Templates (1)
product:"MySQL" || product:"mysql"