Archive for the ‘%’ Category

MySQL anonymous accounts – User=”, Host=’%’ – CODE RED

Октябрь 5th, 2009
I want to highlight the importance of reviewing mysql’s initial set of accounts. Say you have a mysql on abc.def.ghi.jkl running on port 3306 anonymous account with privileges without a password, then: 1. mysql (if issued on localhost) 2. mysql -h abc.def.ghi.jkl 3. mysql -u ” -h abc.def.ghi.jkl 4. mysql -u ” -h abc.def.ghi.jkl -P 3306 5. mysql -u user_which_does_not_exist -h [...]
PlanetMySQL Voting: Vote UP / Vote DOWN
 

Posted in %, Beginner, accounts, anonymous, authentication, mysql, security, threat, usernames

Комментарии отключены