Bug #37369 Serious bug in login authentication MYSQL SERVER 5.1.24 and 5.1.25
Submitted: 12 Jun 2008 14:44 Modified: 13 Jun 2008 12:41
Reporter: Sharad Kelkar Email Updates:
Status: Duplicate Impact on me:
None 
Category:MySQL Server Severity:S2 (Serious)
Version:5.1.25 RC OS:Windows
Assigned to: CPU Architecture:Any
Tags: Login error when trying to connect with password

[12 Jun 2008 14:44] Sharad Kelkar
Description:
There is one serious bug which I also reported with 5.1.24 RC  OS : MS Windows XP Service Pack 2
This bug is persistent with 5.1.25 RC OS : MS Windows XP Service Pack 2
THIS WAS NOTE THE CASE WITH Server 5.1.22 RC
Somehow folks at MySQL could not confirm or pay necessary attention to it

I am trying to describe it as elaborately as possible
 Install MySQL from ZIP archive to C:\mysql , I have not used Installer

Strange Things:
(1) I am able to login just by typing mysql at command prompt, username and password in not checked. This looks pretty risky to me..
In mysql 5.1.22 at least you have to type mysql -u root  ( to specify root as user without password )

(2) I than login as mysql -u root  ( without password , that's OK )

(3) Now I create user abc as follows
CREATE USER `abc`@`%` identified by 'pqr' ;
This creates the user abc and sets the password as pqr

(4) Now if I connect as follows
mysql -u abc -p
The mysql asks for password 
I type pqr as password
My login is rejected with Error

ERROR 1045 (28000): Access denied for user 'abc'@'localhost' (using password: YES)

(5) Surprisingly I am simply able to login without supplying any password as follows
mysql -u abc   ( no password )
I am able to login and use mysql console .... !

(6) I am more than 100% sure that this was not the case in Versin 5.1.22
I could not login without password.

PLEASE NOTE THAT I HAVE FOLLOWED THE SAME PROCEDURE  BOTH FOR VERSION 5.1.22 AND 5.1.25
BUT THE BEHAVIOR  OF MYSQL IS DIFFERENT BETWEEN 5.1.22 AND 5.1.25

Please do something about this.
IS IT WINDOWS SPECIFIC THAT'S WHY NOT OBSERVED BY MYSQL QA TEAM ?

Thanks

Sharad Kelkar
Email: drsskelkar@gmail.com
Mobile: +919825022004
Skype ID sharad.s.kelkar 

How to repeat:
Try connecting mysql as described above and you will notice the error !
[12 Jun 2008 14:55] Sharad Kelkar
I have one more thing to add
This problem is faced only when you connect from same machine as server ( localhost )
MySQL behaves normally as expected when you connect from another machine on LAN
Thanks
Sharad Kelkar
[13 Jun 2008 12:41] Susanne Ebrecht
This is a duplicate of bug #36273