Bug #15704 NO_AUTO_CREATE_USER and empty password
Submitted: 13 Dec 2005 7:22 Modified: 3 Aug 2006 13:01
Reporter: Sergei Golubchik Email Updates:
Status: Verified Impact on me:
None 
Category:MySQL Server: Security: Privileges Severity:S3 (Non-critical)
Version:5.0 OS:Any
Assigned to: CPU Architecture:Any

[13 Dec 2005 7:22] Sergei Golubchik
Description:
In NO_AUTO_CREATE_USER mode GRANT does not create users even if IDENTIFIED BY was provided, but the password was empty.

How to repeat:
SET @@sql_mode='NO_AUTO_CREATE_USER';
GRANT USAGE ON *.* TO foo@bar IDENTIFIED BY '';