Re: serious bug allows anyone access to database as root

[Michael Labbe]

Brad Johnson wrote:
> 
> I'm using mysql 3.22.32 on Linux 2.2.14 kernel, and I believe that I've found
> a major problem.
> 
> If, at the command line, I type
> 
>   $ mysql -u root -p
> 
> I get a password prompt, just like I should.  However, if I type
> 
>   $ mysql -u root-p
> 
> without the space after the "root," it lets me right in.  I can do this as
> any user, and I can repeat it over and over.  This seems to be a serious
> vulnerability.
> 
> Brad Johnson
> UNIX Systems Administrator
> Trivergent Communications, INC.

I am unable to repeat with 3.22.16a-gamma, for pc-linux-gnu (i686):
ERROR 1044: Access denied for user: '@localhost' to database 'ebook'

You may want to check your configuration.

--
Michael Labbe
Systems Programmer
Internet Marketing Center
Work: [phone]