MySQL Authentication Brute Force Attack
Summary: A MySQL authentication bug disclosed on the oss-sec mailing list lets an attacker log in with an invalid password roughly 1 in every 256 attempts on platforms where memcmp(3) can return values outside -128 to 127, such as 64-bit Ubuntu. Exploitation requires only a one-line shell script looping the mysql client against a remote host, and Cisco's VRT released SID 23115 to detect bursts of 100 or more login attempts in 5 seconds.
What you should know: A script kiddie can copy and paste a loop and land in your database as root, and the vast majority of MySQL builds are not impacted, so the exposure is concentrated in the specific platforms you may not have inventoried.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026