MySQL vulnerability

[Blossom]

http://www.theregister.co.uk/2012/06/11/mysql_mariadb_password_flaw

 

[PoshTiger]

Thanks for the info...

I'm off to change the login names to my databases to something obscure...

 

[RobM]

Basically don't use 'root' for anything. Move off the standard SSH/MySQL ports etc. This will stop 99.999% of brute force hacks.

 

[jimm]

Thanks for the info...

I'm off to change the login names to my databases to something obscure...

You probably have the user root dont forget
And do you really need MySQL exposed to the web? FW it off to no one or a list of allowed hosts!

And having said that ive tested many servers (mainly Plesk and cPanel servers mind) and found not one which was exploitable from this bug...

 

[retired_member21]

Only if open on port 3306