The C script is returning vulnerable on both my local machine (precise) and my v... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

Alan01252 on June 11, 2012 | parent | context | favorite | on: Security vulnerability in MySQL ubuntu

The C script is returning vulnerable on both my local machine (precise) and my vps (Ubuntu 11.10).

However tests of trying to brute force the root password using the mysql one liners in this thread have failed every time.

Both machines allow local access only so I assume I'm safe.

michiel3 on June 11, 2012 [–]

Yep, if you're blocking remote hosts to authenticate on 3306 (or any other port you're running mysqld on) you're safe. The attacking host can't authenticate itself, so it's unable to exploit this bug.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact