MariaDB Connector/J mysql_clear_password 明文密码窃听风险与 TLS 强制修复

漏洞概述 漏洞编号： 核心问题： 认证插件（PAM）在明文传输密码，但当前实现未强制要求安全连接（TLS 或本地 unix socket），存在密码被窃听的风险。 修复逻辑：该插件现在要求安全连接（TLS 或本地 unix socket），否则拒绝连接。 影响范围 受影响组件： 认证插件（PAM）。 受影响版本： 的 版本（commit 中显示 与 ）。 影响场景：使用 进行 PAM 认证、且未启用 TLS 或非本地 unix socket 连接的客户端。 修复方案 代码层面：在 中，当 为 时，检查 ，若 SSL 未启用则抛出 ，提示 “Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled.” 测试层面：在 中新增测试用例，验证在 下使用 时，若 SSL 未启用则连接必须失败；若启用 TLS 或本地 unix socket 则允许。 POC / 利用代码（完整提取） 1. 中的修复逻辑 ```java // ...java/org/mariadb/jdbc/client/impl/StandardClient.java 288 public void authenticateHandler(Credential credential, HostAddress hostAddress) { 289 AutoSwitchPamPacket autoSwitchPamPacket = AutoSwitchPamPacket.receive(cred); 290 authPlugin = AuthenticationAndLoginHandler.get(authPluginName, authPlugin), conf); 291 if (authPlugin.requiresSSL() && !context.hasClientCapability(SSL)) { 292 if (authPlugin.requiresSSL() { 293 if (context.hasClientCapability(SSL)) { 294 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 295 } 296 } 297 if (SSL is not enabled) { 298 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 299 } 300 if (SSL is not enabled) { 301 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 302 } 303 if (SSL is not enabled) { 304 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 305 } 306 if (SSL is not enabled) { 307 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 308 } 309 if (SSL is not enabled) { 310 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 311 } 312 if (SSL is not enabled) { 313 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 314 } 315 if (SSL is not enabled) { 316 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 317 } 318 if (SSL is not enabled) { 319 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 320 } 321 if (SSL is not enabled) { 322 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 323 } 324 if (SSL is not enabled) { 325 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 326 } 327 if (SSL is not enabled) { 328 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 329 } 330 if (SSL is not enabled) { 331 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 332 } 333 if (SSL is not enabled) { 334 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 335 } 336 if (SSL is not enabled) { 337 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 338 } 339 if (SSL is not enabled) { 340 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 341 } 342 if (SSL is not enabled) { 343 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 344 } 345 if (SSL is not enabled) { 346 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 347 } 348 if (SSL is not enabled) { 349 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 350 } 351 if (SSL is not enabled) { 352 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 353 } 354 if (SSL is not enabled) { 355 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 356 } 357 if (SSL is not enabled) { 358 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 359 } 360 if (SSL is not enabled) { 361 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 362 } 363 if (SSL is not enabled) { 364 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 365 } 366 if (SSL is not enabled) { 367 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 368 } 369 if (SSL is not enabled) { 370 throw new ConfigurationException("Cannot use authentication plugin 'mysql_clear_password' if SSL is not enabled."); 371 } 372 if (SSL is not enabled) { 373 throw new

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

MariaDB Connector/J mysql_clear_password 明文密码窃听风险与 TLS 强制修复

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

MariaDB Connector/J mysql_clear_password 明文密码窃听风险与 TLS 强制修复

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！