CVE-2012-2122

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 96%

from disclosure to weapon0 days

Published on NVDJun 26

1st PoCJun 12

metasploitJun 9

exploitation probability

96%top 1% of all CVEs

observed exploitation

nono source reports it

7 public exploit(s)

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.

Affected products

n/a · n/a

public PoCs found — 7✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/19092 githubgithub.com/Avinza/CVE-2012-2122-scanner★ 1 githubgithub.com/cyberharsh/Oracle-mysql-CVE-2012-2122★ 1 githubgithub.com/zhangkaibin0921/CVE-2012-2122★ 0 githubgithub.com/netw0rk7/CVE-2012-2122-Home-Lab★ 0 githubgithub.com/K3ysTr0K3R/CVE-2012-2122★ 0 cve_referencewww.exploit-db.com/exploits/19092unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://bugs.mysql.com/bug.php?id=64884 http://kb.askmonty.org/en/mariadb-5162-release-notes/http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html https://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql http://seclists.org/oss-sec/2012/q2/493 http://secunia.com/advisories/49417 http://secunia.com/advisories/53372 http://security.gentoo.org/glsa/glsa-201308-06.xml http://securitytracker.com/id?1027143 http://www.exploit-db.com/exploits/19092 http://www.securityfocus.com/bid/53911