full-disclosure - MySQL 4.1/5.0 zero-length password auth. bypass

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <40F3865B.000002.21874@soapbox.yandex.ru>
From: Pigrelax at yandex.ru (Pigrelax)
Subject: MySQL 4.1/5.0 zero-length password auth. bypass - modified MySQL client

MySQL 4.1/5.0 zero-length password auth. bypass - modified MySQL client
autor: RusH security team, http://rst.void.ru
Usage:
F:\>mysql -uroot -pr57
Welcome to the MySQL monitor.

>>Little cool edit by RusH security team =) http://rst.void.ru

Commands end with ; or \g.
Your MySQL connection id is 27 to server version: 4.1.1a-alpha-nt

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql>
---------------------------------------------------------------------------------------------------
F:\>mysql -uroot -pANY_WHAT_YOU_WANT
Welcome to the MySQL monitor.

>>Little cool edit by RusH security team =) http://rst.void.ru

Commands end with ; or \g.
Your MySQL connection id is 28 to server version: 4.1.1a-alpha-nt

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql>

download: http://www.securitylab.ru/46358.html

---------------------
www.maxpatrol.com - professional network security scanner