init CVE-2012-2122 #25
Conversation
| version: '2' | ||
| services: | ||
| mysql: | ||
| image: vulhub/mysql:5.5.23 |
There was a problem hiding this comment.
Could you please download the Docker image, put it to the data folder and install it from file?
| dest: /opt/CVE-2012-2122 | ||
|
|
||
| - name: Start Docker Compose services | ||
| command: docker compose up -d |
There was a problem hiding this comment.
Please use built-in community.docker.docker_compose
| ubuntu: | ||
| playbook: ubuntu.yml | ||
| command: | ||
| - "bash /opt/CVE-2012-2122/poc.sh" |
There was a problem hiding this comment.
It only shows me this, over and over again:
ERROR 1045 (28000): Access denied for user 'root'@'172.18.0.1' (using password: YES)
mysql: [Warning] Using a password on the command line interface can be insecure.
Perhaps we should execute the mysql command until we succeed? (and skip printing the unsuccessful attempts)
There was a problem hiding this comment.
I have tested inside the virtual machine (vagrant ssh) a few times. The POC is fine, and it can log in to MySQL very fast (our loop time is enough). Besides, I have an echo to print out login success in the poc.sh, but they didn't show in the output. Could you please let me know how to control the output, like printing out everything and skipping printing the unsuccessful attempts for the virtual machine? Thanks!
There was a problem hiding this comment.
Ah, I see, "access mysql success" was shown in the very beginning indeed, but I expected it to be at the end:
2024-11-20 16:55:07,569 - INFO - [ubuntu] Executing 'bash /opt/CVE-2012-2122/poc.sh'...
2024-11-20 16:55:17,639 - INFO - [ubuntu] access mysql success2024-11-20 16:55:17,639 - INFO - [ubuntu] mysql: [Warning] Using a password on the command line interface can be insecure.
ERROR 1045 (28000): Access denied for user 'root'@'172.18.0.1' (using password: YES)
mysql: [Warning] Using a password on the command line interface can be insecure.
ERROR 1045 (28000): Access denied for user 'root'@'172.18.0.1' (using password: YES)
mysql: [Warning] Using a password on the command line interface can be insecure.
ERROR 1045 (28000): Access denied for user 'root'@'172.18.0.1' (using password: YES)
The POC is fine, and it can log in to MySQL very fast (our loop time is enough)
I don't see that. I only see "access denied" and "access mysql success" that will be always shown. It's just an echo, it is always shown. What am I missing here?
This is a bug of mysql, bypass the login verification.