MySQL Allows blank user with no password to login

I just realized I have some blank users which I deleted but I can still login to this dummy account without a password for some reason.

 

mysql -u -p
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 5
Server version: 5.1.69 Source distribution

Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql>

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> select user()
    -> ;
+--------------+
| user()       |
+--------------+
| -p@localhost |
+--------------+
1 row in set (0.00 sec)


mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| test               |
+--------------------+
2 rows in set (0.00 sec)



mysql> select User from user;
+-----------------+
| User            |
+-----------------+
| root            |
|                 |
| root            |
|                 |
| root            |
+-----------------+
6 rows in set (0.00 sec)

mysql> delete from mysql where User='';
ERROR 1146 (42S02): Table 'mysql.mysql' doesn't exist
mysql> delete from user where User='';
Query OK, 2 rows affected (0.00 sec)

mysql> select User from user;
+-----------------+
| User            |
+-----------------+
| root            |
| root            |
| root            |
+-----------------+
4 rows in set (0.00 sec)


Tags:

mysql, allows, user, password, logini, users, deleted, login, dummy, commands, server, copyright, oracle, affiliates, reserved, registered, trademark, corporation, trademarks, respective, owners, input, select, localhost, databases, database, information_schema, rows, delete, doesn, query, ok,

Latest Articles

  • Linux How To Create A RamDisk
  • mdadm force resync when resync=PENDING solution
  • Proxmox Breaks Storage/LVM Backing If Killing QEMU-IMG
  • Proxmox trying to acquire lock... TASK ERROR: can't lock file '/var/lock/qemu-server/lock-102.conf' - got timeout
  • Debian 9 SSH root password authentication failure password not working problem / solution
  • QEMU / KVM How To Manually Create Basic Virtual Machine VM
  • Linux wlan0 check all wireless clients
  • PHP Issues With Decoding Strange Smart Quotes And Non-Standard ASCII Characters
  • /etc/iproute2/rt_tables default settings file in Linux Centos 6,7 and most other NIX's
  • bind named error solutions named[2169]: error (no valid DS) resolving / error (broken trust chain) resolving / : error (no valid RRSIG) resolving 'com/DS/IN':
  • iptables how to log ALL dropped incoming packets
  • How To Edit Linux Based NM Network Manager Connection Settings Without GUI
  • Linux Disable IPV6 Centos / Debian / Mint Howto
  • Linux use growisofs to burn a larger file on a BD-R / Bluray Disc
  • Linux partprobe/partx cannot access last and 4th partition
  • DRBD Errors Caused By Physical Corruption
  • mdadm: add new device failed for /dev/sdb4 as 3: Invalid argument solution
  • Linux named / bind how to dump, view and clear the cache!
  • Centos 6 / 7 / 8 How To Change Default nameservers in /etc/resolv.conf when using DHCP / dhclient
  • Adobe Acrobat Reader for Linux to use and view XFA Fillable Forms