MySQL.NULL.Password

Description

This indicates an attempt to gain unauthorized access to a MySQL database. MySQL is an open source database based on Structured Query Language (SQL). Due to a design flaw in password authentication, an attacker can send a specially crafted packet to bypass the authentication mechanism and gain access to the database.

Affected Products

MySQL AB MySQL 5.0.0-alpha
MySQL AB MySQL 5.0.0-0
MySQL AB MySQL 4.1.2-alpha
MySQL AB MySQL 4.1.0-alpha
MySQL AB MySQL 4.1.0-0

Impact

An attacker can bypass the authentication process to gain access to the database.

Recommended Actions

For MySQL 4.1.2 or earlier, update to version 4.1.3 or newer.
For MySQL 5.0 update to the newest version of MySQL.

References