full-disclosure - MySQL and the user "su"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: danbuk at gmail.com (DanB UK)
Subject: MySQL and the user "su"

Hi,

> I have today determined that I can connect to a local MySQL-server per
>  "mysql -usu".  I regard that to error, can that someone confirm?

I can confirm that I can connect, but not in access to any databases.
EG:
dan@...ebox dan $ mysql -usu
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 229 to server version: 4.0.18

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> use mailsql
ERROR 1044: Access denied for user: '@...alhost' to database 'mailsql'
mysql> use mysql
ERROR 1044: Access denied for user: '@...alhost' to database 'mysql'
mysql> quit
Bye
dan@...ebox dan $

> I use Gentoo with a MySQL 4.0.23 and I enough debian maschines. I can
> connect from all maschines.

This is also a Gentoo box, but I MySQL v 4.0.18

Cheers,
Daniel.

-- 
DanB UK
London, UK
(Currently in Berlin, DE)