CVE-2012-2122: A Tragically Comedic Security Flaw in MySQL

https://www.rapid7.com/blog/post/2012/06/11/cve-2012-2122-a-...

> ... Since the authentication protocol generates a different hash each time this comparison is done, there is a 1 in 256 chance that ANY password would be accepted for authentication. ...