MySQL allows entry without Password

view full story

http://serverfault.com – I have configured my MySQL Database to require passwords on all users, even root from the machine itself. Now I discovered that there are empty Users in my Database Reproduce: mysql -u root -p and then use mysql; & select * from user; it gives me 2 entries, one with "localhost" and user and one with the machine's hostname and . now i tried to access the account with mysql -u ' ' (yes it's correct, leave a space between the ' things) and I log in without a password. The user can "only" see information_schema and test, the two databases created by default. He does not has access to mysq (HowTos)