MySQL Allows blank user with no password to login

I just realized I have some blank users which I deleted but I can still login to this dummy account without a password for some reason.

 

mysql -u -p
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 5
Server version: 5.1.69 Source distribution

Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql>

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> select user()
    -> ;
+--------------+
| user()       |
+--------------+
| -p@localhost |
+--------------+
1 row in set (0.00 sec)


mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| test               |
+--------------------+
2 rows in set (0.00 sec)



mysql> select User from user;
+-----------------+
| User            |
+-----------------+
| root            |
|                 |
| root            |
|                 |
| root            |
+-----------------+
6 rows in set (0.00 sec)

mysql> delete from mysql where User='';
ERROR 1146 (42S02): Table 'mysql.mysql' doesn't exist
mysql> delete from user where User='';
Query OK, 2 rows affected (0.00 sec)

mysql> select User from user;
+-----------------+
| User            |
+-----------------+
| root            |
| root            |
| root            |
+-----------------+
4 rows in set (0.00 sec)


Tags:

mysql, allows, user, password, logini, users, deleted, login, dummy, commands, server, copyright, oracle, affiliates, reserved, registered, trademark, corporation, trademarks, respective, owners, input, select, localhost, databases, database, information_schema, rows, delete, doesn, query, ok,

Latest Articles

  • How to combine .txt ACLs without breaking things
  • How to ping all of Googlebot's IPs script
  • 'virtio0' uses a qcow2 feature which is not supported by this qemu version: QCOW version 3
  • Linux bash script to get the IP of a list of hostnames
  • How To Use Camera Webcam in Docker for OBS Studio etc...
  • Computer Server Won't Post Boot Or Enter BIOS Setup After Installing RAID SAS or GPU Card etc..
  • How To Test PHP Scripts from CLI with GET variables/query string
  • apt-cache how to see all available versions of a package in Debian Ubuntu Mint
  • Virtualbox VBox Guest-utils drag and drop files stops working with Windows VMs
  • How To Remove Ubuntu Netplan and Go Back to /etc/network/interfaces
  • How To Force Flash an AMD Instinct GPU To Another Model Using Debian Ubuntu Mint Linux
  • How To compile ollama from source to use unsupported AMD GPU with rocm in Ubuntu Debian
  • QEMU KVM Virtio GPU Windows Cannot Select 1080P
  • Linux Gnome Desktop Ubuntu Mint Debian Gets Slower After Weeks
  • Firefox How to Save Full Page As Screenshot/PDF
  • Nvidia Datacenter Driver Tesla Slow nvidia-smi response and high utilization with 0 usage
  • ffmpeg how to normalize / increase the volume of your audio
  • kdenlive audio blips pops cracks artifacts solution fix
  • haproxy / nginx certbot SSL issues
  • nginx how to see the real IP when behind a CDN