Hackers can bypass MySQL password verification. lucian constantin. June 13, 2012. Facebook. Twitter. Linkedin. ReddIt. Email. Print. ... function can return values outside the -128 to 127 range.

The vulnerability can only be exploited if MySQL was built on a system where the memcmp() function can return values outside the -128 to 127 range. This is the case for Linux systems that use an ...

But in the affected versions of MariaDB and MySQL, as MontyProgram's Sergei Golubchik wrote in a list posting on June 9, the database can be fooled into accepting a password even if it doesn't match.